bf9a82a6433701aa2f02761f3a7c425ffef4fa09 |
|
25-Mar-2016 |
Chad Brubaker <cbrubaker@google.com> |
Add handleTrustStorageUpdate This pruns all the stored trusted issuers so that changes to the system or user CA store are detected. Currently this is only exposed as a TestApi, but it can be hooked up to the trusted storage change event in a future commit. Bug: 27526668 Change-Id: Ic426254babab9a3177c968bc05b45e95eaac1fdd
/frameworks/base/core/java/android/security/net/config/KeyStoreCertificateSource.java
|
aa6c3c3e252252b80c3900bd4c1ff27d37265c6d |
|
18-Dec-2015 |
Chad Brubaker <cbrubaker@google.com> |
Support TrustedCertificateStore.findAllIssuers Change-Id: I176ec42c9907e50ee218e4fb352b530ca797be46
/frameworks/base/core/java/android/security/net/config/KeyStoreCertificateSource.java
|
fa9beebb83abe38fa04c14dc628bc5c1b4b068cd |
|
25-Nov-2015 |
Chad Brubaker <cbrubaker@google.com> |
Expose findByIssuerAndSignature This will be used to create a custom conscrypt TrustedCertificateStore to avoid loading all of the trusted certificates into memory in a keystore. Change-Id: Iaf54b691393ecadae6c7ff56b8adc6a2a2923d29
/frameworks/base/core/java/android/security/net/config/KeyStoreCertificateSource.java
|
d3af9620817220d737fdb532c1ae1032bdd65e11 |
|
16-Nov-2015 |
Chad Brubaker <cbrubaker@google.com> |
Expose findTrustAnchorBySubjectAndPublicKey This allows for faster lookups of TrustAnchors when checking pin overrides without needing to iterate over all certificates. Currently only the system and user trusted certificate store are optimized to avoid reading the entire source before doing the trust anchor lookup, improvements to the resource source will come in a later commit. This also refactors System/UserCertificateSource to avoid code duplication. Change-Id: Ice00c5e047140f3d102306937556b761faaf0d0e
/frameworks/base/core/java/android/security/net/config/KeyStoreCertificateSource.java
|
9a0130865e224b264c71abb7675cea42931a292e |
|
26-Nov-2015 |
Chad Brubaker <cbrubaker@google.com> |
Remove isCertificateEntry check This was returning false on some test keystores even when getCertificate would correct return a certificate. Remove the check to be consistent with how conscrypt loads trust anchors from the keystore. Bug: 25897324 Change-Id: Ie87658a261ee7ba1cca6896e34b6c53b8abfba85
/frameworks/base/core/java/android/security/net/config/KeyStoreCertificateSource.java
|
5a1078f40dd511901c33ccf78be6e2d5081d6637 |
|
10-Nov-2015 |
Chad Brubaker <cbrubaker@google.com> |
Add NetworkSecurityConfigProvider Change-Id: I321e3ca94cc2a8d5e0e5d82a83b255ff5b8a71d2
/frameworks/base/core/java/android/security/net/config/KeyStoreCertificateSource.java
|