OSDN Git Service

Expose findTrustAnchorBySubjectAndPublicKey
authorChad Brubaker <cbrubaker@google.com>
Mon, 16 Nov 2015 18:48:20 +0000 (10:48 -0800)
committerChad Brubaker <cbrubaker@google.com>
Tue, 1 Dec 2015 01:20:00 +0000 (17:20 -0800)
commitd3af9620817220d737fdb532c1ae1032bdd65e11
treeabf147a0d643303681a7110bcb78b279e886b256
parent7d72975c5b3e6f18710f078199e7a9e3f9376c60
Expose findTrustAnchorBySubjectAndPublicKey

This allows for faster lookups of TrustAnchors when checking pin
overrides without needing to iterate over all certificates.

Currently only the system and user trusted certificate store are
optimized to avoid reading the entire source before doing the trust
anchor lookup, improvements to the resource source will come in a later
commit.

This also refactors System/UserCertificateSource to avoid code
duplication.

Change-Id: Ice00c5e047140f3d102306937556b761faaf0d0e
12 files changed:
core/java/android/security/net/config/CertificateSource.java
core/java/android/security/net/config/CertificatesEntryRef.java
core/java/android/security/net/config/DirectoryCertificateSource.java [new file with mode: 0644]
core/java/android/security/net/config/KeyStoreCertificateSource.java
core/java/android/security/net/config/NetworkSecurityConfig.java
core/java/android/security/net/config/NetworkSecurityTrustManager.java
core/java/android/security/net/config/ResourceCertificateSource.java
core/java/android/security/net/config/SystemCertificateSource.java
core/java/android/security/net/config/UserCertificateSource.java
tests/NetworkSecurityConfigTest/res/xml/override_dedup.xml [new file with mode: 0644]
tests/NetworkSecurityConfigTest/src/android/security/net/config/TestCertificateSource.java
tests/NetworkSecurityConfigTest/src/android/security/net/config/XmlConfigTests.java