Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Add conscrypt updatable certificates." am: 0b62dccbbc am: cd3609306d

Browse Source 
Original change: https://android-review.googlesource.com/c/platform/frameworks/base/+/2323439

Change-Id: I6113f57c111d1fa56120fd5ae2e0e8938ab5c05c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Miguel Aranda
2022-12-22 00:33:15 +00:00
committed by Automerger Merge Worker
parent bb9f4937fd cd3609306d
commit 077372e2e4
1 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
core/java/android/security/net/config/SystemCertificateSource.java
View File

@@ -18,6 +18,7 @@ package android.security.net.config;
import android.os.Environment;
import android.os.UserHandle;
import java.io.File;
/**
@@ -32,11 +33,20 @@ public final class SystemCertificateSource extends DirectoryCertificateSource {
private final File mUserRemovedCaDir;
private SystemCertificateSource() {
super(new File(System.getenv("ANDROID_ROOT") + "/etc/security/cacerts"));
super(getDirectory());
File configDir = Environment.getUserConfigDirectory(UserHandle.myUserId());
mUserRemovedCaDir = new File(configDir, "cacerts-removed");
}
private static File getDirectory() {
// TODO(miguelaranda): figure out correct code path.
File updatable_dir = new File("/apex/com.android.conscrypt/cacerts");
if (updatable_dir.exists()) {
return updatable_dir;
}
return new File(System.getenv("ANDROID_ROOT") + "/etc/security/cacerts");
}
public static SystemCertificateSource getInstance() {
return NoPreloadHolder.INSTANCE;
}