diff options
author | Robin Lee <rgl@google.com> | 2016-02-23 12:58:07 +0000 |
---|---|---|
committer | android-build-merger <android-build-merger@google.com> | 2016-02-23 12:58:07 +0000 |
commit | b8ed5ed218a54afade3d2431e73899a1a6bd2215 (patch) | |
tree | 3b910f9c236c9bc9aed9f30aab4d3a9bc530c17d | |
parent | 1a4721537879353580be60784e95e89ddbf9419c (diff) | |
parent | 00efcbac543be111c1cf756c2d62bc4b88f654b0 (diff) | |
download | android_packages_apps_CertInstaller-b8ed5ed218a54afade3d2431e73899a1a6bd2215.tar.gz android_packages_apps_CertInstaller-b8ed5ed218a54afade3d2431e73899a1a6bd2215.tar.bz2 android_packages_apps_CertInstaller-b8ed5ed218a54afade3d2431e73899a1a6bd2215.zip |
Trust CA certificates added for the whole OS only am: 4f135c9bd7 am: 63176f4144 am: fb82066502 am: 92b51d2e67 am: 1e39462d6f am: 3048960121 am: 021a55abd2
am: 00efcbac54
* commit '00efcbac543be111c1cf756c2d62bc4b88f654b0':
Trust CA certificates added for the whole OS only
-rw-r--r-- | src/com/android/certinstaller/CertInstaller.java | 3 | ||||
-rw-r--r-- | src/com/android/certinstaller/CredentialHelper.java | 6 |
2 files changed, 8 insertions, 1 deletions
diff --git a/src/com/android/certinstaller/CertInstaller.java b/src/com/android/certinstaller/CertInstaller.java index 907646e..eb8fa90 100644 --- a/src/com/android/certinstaller/CertInstaller.java +++ b/src/com/android/certinstaller/CertInstaller.java @@ -180,7 +180,8 @@ public class CertInstaller extends Activity { Toast.makeText(this, getString(R.string.cert_is_added, mCredentials.getName()), Toast.LENGTH_LONG).show(); - if (mCredentials.hasCaCerts()) { + if (mCredentials.hasCaCerts() + && mCredentials.getInstallAsUid() == KeyStore.UID_SELF) { // more work to do, don't finish just yet new InstallCaCertsToKeyChainTask().execute(); return; diff --git a/src/com/android/certinstaller/CredentialHelper.java b/src/com/android/certinstaller/CredentialHelper.java index c131268..b502a1d 100644 --- a/src/com/android/certinstaller/CredentialHelper.java +++ b/src/com/android/certinstaller/CredentialHelper.java @@ -100,6 +100,7 @@ class CredentialHelper { try { outStates.putSerializable(DATA_KEY, mBundle); outStates.putString(KeyChain.EXTRA_NAME, mName); + outStates.putInt(Credentials.EXTRA_INSTALL_AS_UID, mUid); if (mUserKey != null) { outStates.putByteArray(Credentials.USER_PRIVATE_KEY, mUserKey.getEncoded()); @@ -120,6 +121,7 @@ class CredentialHelper { void onRestoreStates(Bundle savedStates) { mBundle = (HashMap) savedStates.getSerializable(DATA_KEY); mName = savedStates.getString(KeyChain.EXTRA_NAME); + mUid = savedStates.getInt(Credentials.EXTRA_INSTALL_AS_UID, -1); byte[] bytes = savedStates.getByteArray(Credentials.USER_PRIVATE_KEY); if (bytes != null) { setPrivateKey(bytes); @@ -256,6 +258,10 @@ class CredentialHelper { return mUid != -1; } + int getInstallAsUid() { + return mUid; + } + Intent createSystemInstallIntent() { Intent intent = new Intent("com.android.credentials.INSTALL"); // To prevent the private key from being sniffed, we explicitly spell |