OSDN Git Service

Clear only keystore credential entires
authorChad Brubaker <cbrubaker@google.com>
Thu, 21 May 2015 22:57:24 +0000 (15:57 -0700)
committerChad Brubaker <cbrubaker@google.com>
Fri, 22 May 2015 18:31:19 +0000 (11:31 -0700)
commitce10b5edf0ba19b2bf74423c45d6640ab345ced4
tree6a406924dd99d7365854feb118661c07356e0d67
parenta0e052b17b0c730dcd61ad2787c041c75107f106
Clear only keystore credential entires

Instead of reseting the whole user only clear the uids that are used
for credential storage. These are limited to only WIFI, VPN, ROOT and
System. This prevents applications that use keystore for crypto keys
from losing their keys when the user clears credentials.

Previously when reset was called the next time the user unlocked the
keystore it would be reinitialized with the user's password however this
behavior was removed from keystore causing a loop of unlock prompts from
CredentialStorage when trying to install a new certificate after clearing
the storage.

Additionally this makes clear credentials clear any managed profiles as
well, previously it only cleared the current user.

Bug:21373935
Change-Id: Id86ec0bc66a4f6c0d5e649bead007007e2fc8268
src/com/android/settings/CredentialStorage.java