Credentials.java revision a00a2b33ccc6bc079c3ee57a938f62947b48a001
19b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh/*
29b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh * Copyright (C) 2009 The Android Open Source Project
39b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh *
49b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh * Licensed under the Apache License, Version 2.0 (the "License");
59b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh * you may not use this file except in compliance with the License.
69b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh * You may obtain a copy of the License at
79b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh *
89b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh *      http://www.apache.org/licenses/LICENSE-2.0
99b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh *
109b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh * Unless required by applicable law or agreed to in writing, software
119b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh * distributed under the License is distributed on an "AS IS" BASIS,
129b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
139b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh * See the License for the specific language governing permissions and
149b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh * limitations under the License.
159b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh */
169b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh
179b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yehpackage android.security;
189b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh
199b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yehimport android.content.ActivityNotFoundException;
209b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yehimport android.content.Context;
219b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yehimport android.content.Intent;
229b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yehimport android.util.Log;
239d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstromimport com.android.org.bouncycastle.openssl.PEMReader;
249d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstromimport com.android.org.bouncycastle.openssl.PEMWriter;
259d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstromimport java.io.ByteArrayInputStream;
269d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstromimport java.io.ByteArrayOutputStream;
279d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstromimport java.io.IOException;
289d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstromimport java.io.InputStreamReader;
299d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstromimport java.io.OutputStreamWriter;
309d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstromimport java.io.Reader;
319d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstromimport java.io.Writer;
329d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstromimport java.nio.charset.Charsets;
339b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yehimport java.security.KeyPair;
349d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstromimport java.util.ArrayList;
359d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstromimport java.util.List;
369b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh
379b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh/**
389b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh * {@hide}
399b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh */
409b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yehpublic class Credentials {
419b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    private static final String LOGTAG = "Credentials";
4244039172627d1c15737ea73836ad375559d76211Chia-chi Yeh
4344039172627d1c15737ea73836ad375559d76211Chia-chi Yeh    public static final String INSTALL_ACTION = "android.credentials.INSTALL";
4444039172627d1c15737ea73836ad375559d76211Chia-chi Yeh
454a9e1a2494f2e48b157506d7c731187907b7fd4eBrian Carlstrom    public static final String UNLOCK_ACTION = "com.android.credentials.UNLOCK";
464a9e1a2494f2e48b157506d7c731187907b7fd4eBrian Carlstrom
479b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    /** Key prefix for CA certificates. */
489b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    public static final String CA_CERTIFICATE = "CACERT_";
499b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh
509b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    /** Key prefix for user certificates. */
519b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    public static final String USER_CERTIFICATE = "USRCERT_";
529b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh
539b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    /** Key prefix for user private keys. */
549b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    public static final String USER_PRIVATE_KEY = "USRPKEY_";
559b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh
569b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    /** Key prefix for VPN. */
579b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    public static final String VPN = "VPN_";
589b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh
599b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    /** Key prefix for WIFI. */
609b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    public static final String WIFI = "WIFI_";
619b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh
629b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    /** Data type for public keys. */
63a00a2b33ccc6bc079c3ee57a938f62947b48a001Brian Carlstrom    public static final String EXTRA_PUBLIC_KEY = "KEY";
649b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh
659b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    /** Data type for private keys. */
66a00a2b33ccc6bc079c3ee57a938f62947b48a001Brian Carlstrom    public static final String EXTRA_PRIVATE_KEY = "PKEY";
679b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh
6867c30dfe8e4bff11a4660ac23e8679b5deb59457Brian Carlstrom    // historically used by Android
6967c30dfe8e4bff11a4660ac23e8679b5deb59457Brian Carlstrom    public static final String EXTENSION_CRT = ".crt";
7067c30dfe8e4bff11a4660ac23e8679b5deb59457Brian Carlstrom    public static final String EXTENSION_P12 = ".p12";
7167c30dfe8e4bff11a4660ac23e8679b5deb59457Brian Carlstrom    // commonly used on Windows
7267c30dfe8e4bff11a4660ac23e8679b5deb59457Brian Carlstrom    public static final String EXTENSION_CER = ".cer";
7367c30dfe8e4bff11a4660ac23e8679b5deb59457Brian Carlstrom    public static final String EXTENSION_PFX = ".pfx";
7467c30dfe8e4bff11a4660ac23e8679b5deb59457Brian Carlstrom
759d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom    /**
769d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom     * Convert objects to a PEM format, which is used for
779d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom     * CA_CERTIFICATE, USER_CERTIFICATE, and USER_PRIVATE_KEY
789d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom     * entries.
799d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom     */
809d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom    public static byte[] convertToPem(Object... objects) throws IOException {
819d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        ByteArrayOutputStream bao = new ByteArrayOutputStream();
829d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        Writer writer = new OutputStreamWriter(bao, Charsets.US_ASCII);
839d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        PEMWriter pw = new PEMWriter(writer);
849d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        for (Object o : objects) {
859d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom            pw.writeObject(o);
869d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        }
879d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        pw.close();
889d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        return bao.toByteArray();
899d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom    }
909d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom    /**
919d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom     * Convert objects from PEM format, which is used for
929d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom     * CA_CERTIFICATE, USER_CERTIFICATE, and USER_PRIVATE_KEY
939d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom     * entries.
949d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom     */
959d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom    public static List<Object> convertFromPem(byte[] bytes) throws IOException {
969d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        ByteArrayInputStream bai = new ByteArrayInputStream(bytes);
979d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        Reader reader = new InputStreamReader(bai, Charsets.US_ASCII);
989d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        PEMReader pr = new PEMReader(reader);
999d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom
1009d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        List<Object> result = new ArrayList<Object>();
1019d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        Object o;
1029d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        while ((o = pr.readObject()) != null) {
1039d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom            result.add(o);
1049d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        }
1059d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        pr.close();
1069d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom        return result;
1079d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom    }
1089d7faa91be6661eccf73494f1ab96ae9a28d42d7Brian Carlstrom
10944039172627d1c15737ea73836ad375559d76211Chia-chi Yeh    private static Credentials singleton;
11044039172627d1c15737ea73836ad375559d76211Chia-chi Yeh
1119b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    public static Credentials getInstance() {
1129b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh        if (singleton == null) {
1139b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh            singleton = new Credentials();
1149b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh        }
1159b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh        return singleton;
1169b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    }
1179b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh
1189b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    public void unlock(Context context) {
1199b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh        try {
1204a9e1a2494f2e48b157506d7c731187907b7fd4eBrian Carlstrom            Intent intent = new Intent(UNLOCK_ACTION);
1219b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh            context.startActivity(intent);
1229b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh        } catch (ActivityNotFoundException e) {
1239b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh            Log.w(LOGTAG, e.toString());
1249b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh        }
1259b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    }
1269b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh
12767c30dfe8e4bff11a4660ac23e8679b5deb59457Brian Carlstrom    public void install(Context context) {
12867c30dfe8e4bff11a4660ac23e8679b5deb59457Brian Carlstrom        try {
129a00a2b33ccc6bc079c3ee57a938f62947b48a001Brian Carlstrom            Intent intent = KeyChain.createInstallIntent();
13067c30dfe8e4bff11a4660ac23e8679b5deb59457Brian Carlstrom            context.startActivity(intent);
13167c30dfe8e4bff11a4660ac23e8679b5deb59457Brian Carlstrom        } catch (ActivityNotFoundException e) {
13267c30dfe8e4bff11a4660ac23e8679b5deb59457Brian Carlstrom            Log.w(LOGTAG, e.toString());
13367c30dfe8e4bff11a4660ac23e8679b5deb59457Brian Carlstrom        }
13467c30dfe8e4bff11a4660ac23e8679b5deb59457Brian Carlstrom    }
13567c30dfe8e4bff11a4660ac23e8679b5deb59457Brian Carlstrom
1369b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    public void install(Context context, KeyPair pair) {
1379b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh        try {
138a00a2b33ccc6bc079c3ee57a938f62947b48a001Brian Carlstrom            Intent intent = KeyChain.createInstallIntent();
139a00a2b33ccc6bc079c3ee57a938f62947b48a001Brian Carlstrom            intent.putExtra(EXTRA_PRIVATE_KEY, pair.getPrivate().getEncoded());
140a00a2b33ccc6bc079c3ee57a938f62947b48a001Brian Carlstrom            intent.putExtra(EXTRA_PUBLIC_KEY, pair.getPublic().getEncoded());
1419b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh            context.startActivity(intent);
1429b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh        } catch (ActivityNotFoundException e) {
1439b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh            Log.w(LOGTAG, e.toString());
1449b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh        }
1459b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    }
1469b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh
1479b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    public void install(Context context, String type, byte[] value) {
1489b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh        try {
149a00a2b33ccc6bc079c3ee57a938f62947b48a001Brian Carlstrom            Intent intent = KeyChain.createInstallIntent();
1509b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh            intent.putExtra(type, value);
1519b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh            context.startActivity(intent);
1529b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh        } catch (ActivityNotFoundException e) {
1539b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh            Log.w(LOGTAG, e.toString());
1549b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh        }
1559b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh    }
1569b7a3f1a6437605022568cad0b92d5006a2ab391Chia-chi Yeh}
157