d3af962 - platform/frameworks/base

commit	d3af9620817220d737fdb532c1ae1032bdd65e11	[log] [tgz]
author	Chad Brubaker <cbrubaker@google.com>	Mon Nov 16 10:48:20 2015 -0800
committer	Chad Brubaker <cbrubaker@google.com>	Mon Nov 30 17:20:00 2015 -0800
tree	abf147a0d643303681a7110bcb78b279e886b256
parent	7d72975c5b3e6f18710f078199e7a9e3f9376c60 [diff]

Expose findTrustAnchorBySubjectAndPublicKey

This allows for faster lookups of TrustAnchors when checking pin
overrides without needing to iterate over all certificates.

Currently only the system and user trusted certificate store are
optimized to avoid reading the entire source before doing the trust
anchor lookup, improvements to the resource source will come in a later
commit.

This also refactors System/UserCertificateSource to avoid code
duplication.

Change-Id: Ice00c5e047140f3d102306937556b761faaf0d0e

core/java/android/security/net/config/CertificateSource.java[diff]
core/java/android/security/net/config/CertificatesEntryRef.java[diff]
core/java/android/security/net/config/DirectoryCertificateSource.java[Added - diff]
core/java/android/security/net/config/KeyStoreCertificateSource.java[diff]
core/java/android/security/net/config/NetworkSecurityConfig.java[diff]
core/java/android/security/net/config/NetworkSecurityTrustManager.java[diff]
core/java/android/security/net/config/ResourceCertificateSource.java[diff]
core/java/android/security/net/config/SystemCertificateSource.java[diff]
core/java/android/security/net/config/UserCertificateSource.java[diff]
tests/NetworkSecurityConfigTest/res/xml/override_dedup.xml[Added - diff]
tests/NetworkSecurityConfigTest/src/android/security/net/config/TestCertificateSource.java[diff]
tests/NetworkSecurityConfigTest/src/android/security/net/config/XmlConfigTests.java[diff]

12 files changed

tree: abf147a0d643303681a7110bcb78b279e886b256