History log of /frameworks/base/keystore/java/android/security/Credentials.java
Revision Date Author Comments (<<< Hide modified files) (Show modified files >>>)
6090995951c6e2e4dcf38102f01793f8a94166e1 19-Nov-2013 John Spurlock <jspurlock@google.com> Remove unused imports from frameworks/base.

Change-Id: Ia1f99bd2c1105b0b0f70aa614f1f4a67b2840906
/frameworks/base/keystore/java/android/security/Credentials.java
d396a448b2e36e29598c954b64bfddef73f3fae0 29-Jun-2013 Elliott Hughes <enh@google.com> Switch frameworks/base over from @hidden Charsets to public StandardCharsets.

Bug: 3484927
Change-Id: I5d136d2ee629588538602766a182ae14ce5fc63c
/frameworks/base/keystore/java/android/security/Credentials.java
3e7be43e2555bbdfe311dcbd9a36f7f05321a2d8 28-Mar-2013 Kenny Root <kroot@google.com> Add ability to install credentials as other UID

We need the ability to install from the system UID to wifi UID
to explicitly bind WiFi credentials to the WiFi profile. This adds the
ability for Wifi Settings to invoke installation of a PKCS12 file for
the wifi UID.

Bug: 8183258
Change-Id: I652b7e6fa93deda6d6d310be33f224e5a356c787
/frameworks/base/keystore/java/android/security/Credentials.java
0efca17105d112a0ff568602831b22bdafa00433 05-Sep-2012 Brian Carlstrom <bdc@google.com> Tracking upgrade to bouncycastle 1.47

Change-Id: I4a3c508c5e65dd46a2df22935b5351092550fad5
/frameworks/base/keystore/java/android/security/Credentials.java
69ddab4575ff684c533c995e07ca15fe18543fc0 25-Aug-2012 Jeff Sharkey <jsharkey@android.com> Always-on VPN.

Adds support for always-on VPN profiles, also called "lockdown." When
enabled, LockdownVpnTracker manages the netd firewall to prevent
unencrypted traffic from leaving the device. It creates narrow rules
to only allow traffic to the selected VPN server. When an egress
network becomes available, LockdownVpnTracker will try bringing up
the VPN connection, and will reconnect if disconnected.

ConnectivityService augments any NetworkInfo based on the lockdown
VPN status to help apps wait until the VPN is connected.

This feature requires that VPN profiles use an IP address for both
VPN server and DNS. It also blocks non-default APN access when
enabled. Waits for USER_PRESENT after boot to check KeyStore status.

Bug: 5756357
Change-Id: If615f206b1634000d78a8350a17e88bfcac8e0d0
/frameworks/base/keystore/java/android/security/Credentials.java
802768dd86c4e8a933dbfbac2e9f1a1daa5f93fa 22-Aug-2012 Kenny Root <kroot@google.com> Add ability to replace chain for PrivateKeyEntry

For the AndroidKeyStore API, allow entries to have their certificate
chain replaced without destroying the underlying PrivateKey. Since
entries are backed by unexportable private keys, requiring them to be
supplied again doesn't make sense and is impossible.

Change-Id: I629ce2a625315c8d8020a082892650ac5eba22ae
/frameworks/base/keystore/java/android/security/Credentials.java
db026710ec0adcf7f72dfb24c65d38a882ee26d8 20-Aug-2012 Kenny Root <kroot@google.com> Add KeyPairGenerator for Android keystore

This allows end-users to generate keys in the keystore without the
private part of the key ever needing to leave the device. The generation
process also generates a self-signed certificate.

Change-Id: I114ffb8e0cbe3b1edaae7e69e8aa578cb835efc9
/frameworks/base/keystore/java/android/security/Credentials.java
5423e68d5dbe048ec6f042cce52a33f94184e9fb 14-Nov-2011 Kenny Root <kroot@google.com> Add signing to keystore

Change the keystore to keep the private keys in keystore. When returned,
it uses the OpenSSL representation of the key to allow users to use it
in various operations through the OpenSSL ENGINE that connects to
keystore.

Change-Id: I3681f98cb2ec49ffc4a49f3821909313b4ab5735
/frameworks/base/keystore/java/android/security/Credentials.java
a00a2b33ccc6bc079c3ee57a938f62947b48a001 29-Jun-2011 Brian Carlstrom <bdc@google.com> KeyChain API for credential installation

Bug: 3497064
Change-Id: I4ac4d8b5559496b1632d63c2129e2bafd240893f
/frameworks/base/keystore/java/android/security/Credentials.java
67c30dfe8e4bff11a4660ac23e8679b5deb59457 24-Jun-2011 Brian Carlstrom <bdc@google.com> Replace KeyChainActivity placeholder UI with more polished dialog (1 of 5)

frameworks/base

Extended KeyChain.chooserPrivateKeyAlias to allow caller to supply
preferred choice to be selected in chooser. This allows Email
settings to highlight the current choice when allowing user to
change settings.
keystore/java/android/security/KeyChain.java
api/current.txt

Implemented KeyChain functionality to pass host and port
information to KeyChainActivity for display.
keystore/java/android/security/KeyChain.java

KeyChain now sends a PendingIntent as part of the Intent it sends
to the KeyChainActivity which can be used to identify the caller
in reliable way.
keystore/java/android/security/KeyChain.java

Moved .pfx/.p12/.cer/.crt constants to Credentials for reuse.
Added Credentials.install variant with no value for use from KeyChainActivity
keystore/java/android/security/Credentials.java

packages/apps/CertInstaller
Source of extension constants now in Credentials
src/com/android/certinstaller/CertFile.java

packages/apps/Browser
Have browser supply host and port information to KeyChain.choosePrivateKeyAlias
Tracking KeyChain.choosePrivateKeyAlias API change
src/com/android/browser/Tab.java

packages/apps/Email
Tracking KeyChain.choosePrivateKeyAlias API change
src/com/android/email/view/CertificateSelector.java

packages/apps/KeyChain

KeyChain now depends on bouncycastle X509Name for formatting
X500Principals, since the 4 X500Principal formatting options could
not format emailAddress attributes in a human readable way and its
the most important attribute to display for client certificates in
most cases.
Android.mk

Changing the UI to a dialog, make the activity style transparent.
AndroidManifest.xml
res/values/styles.xml

Layout for chooser dialog
res/layout/cert_chooser.xml

Layout for list items in chooser
res/layout/cert_item.xml

New resources for dialog including comments for translators.
res/values/strings.xml

New dialog based KeyChainActivity. Now also shows requesting app
and requesting server. Now can preselect a specified alias. New
link directly to CertInstaller.

src/com/android/keychain/KeyChainActivity.java

Fix KeyChainTestActivity to work with TestKeyStore changes that
were causing network activity on the UI to look up the name of
localhost. Also track KeyChain.choosePrivateKeyAlias API change.

tests/src/com/android/keychain/tests/KeyChainTestActivity.java

Change-Id: I07128fba8750f9a6bcb9c6be5da04df992403d69
/frameworks/base/keystore/java/android/security/Credentials.java
9d7faa91be6661eccf73494f1ab96ae9a28d42d7 07-Jun-2011 Brian Carlstrom <bdc@google.com> Change KeyChain to assume PEM encoded keystore entries

Summary:
- Changed KeyChain to assume PEM encoded keystore entries
- Moved convertToPem from CertInstaller for reuse with other Credentials helpers
- Added convertFromPem for use decoding keystore entries

Change-Id: I340168b88aefa458d01e81324824e2e08b1d7c4e
/frameworks/base/keystore/java/android/security/Credentials.java
4a9e1a2494f2e48b157506d7c731187907b7fd4e 23-Apr-2011 Brian Carlstrom <bdc@google.com> Expose Credentials.UNLOCK_ACTION for callers that want to use startActivityForResult

Change-Id: I729b2d8257bda3e7ff7858741ebd5415404880e7
/frameworks/base/keystore/java/android/security/Credentials.java
527f01e76d07b45bdf7ba97ffee0e9b358de658c 20-Jan-2011 Chia-chi Yeh <chiachi@android.com> Update the path of the intent to unlock keystore.

Change-Id: Ia81d0c172f2be6d04cba4db6e6798058f321605d
/frameworks/base/keystore/java/android/security/Credentials.java
c5e630a004d144ba1d4cd1d37dd98eb70a7ec1d8 08-Oct-2010 Hung-ying Tyan <tyanh@google.com> Use explicit intent for installing credentials.

http://b/issue?id=3020049

Change-Id: I429c5b2c9f3b876e6197894a9437952d71d5c472
/frameworks/base/keystore/java/android/security/Credentials.java
44039172627d1c15737ea73836ad375559d76211 21-Sep-2009 Chia-chi Yeh <chiachi@android.com> KeyStore: add java interface.
/frameworks/base/keystore/java/android/security/Credentials.java
9b7a3f1a6437605022568cad0b92d5006a2ab391 17-Sep-2009 Chia-chi Yeh <chiachi@android.com> Add a helper class to send out credentials.

Change-Id: I9a550c6edc55d5c2c601223c011922b183cb4d30
/frameworks/base/keystore/java/android/security/Credentials.java