From 9a0130865e224b264c71abb7675cea42931a292e Mon Sep 17 00:00:00 2001 From: Chad Brubaker Date: Thu, 26 Nov 2015 14:00:50 -0800 Subject: [PATCH] Remove isCertificateEntry check This was returning false on some test keystores even when getCertificate would correct return a certificate. Remove the check to be consistent with how conscrypt loads trust anchors from the keystore. Bug: 25897324 Change-Id: Ie87658a261ee7ba1cca6896e34b6c53b8abfba85 --- .../android/security/net/config/KeyStoreCertificateSource.java | 3 --- 1 file changed, 3 deletions(-) diff --git a/core/java/android/security/net/config/KeyStoreCertificateSource.java b/core/java/android/security/net/config/KeyStoreCertificateSource.java index 1973ef1825e9c..9167a9007325e 100644 --- a/core/java/android/security/net/config/KeyStoreCertificateSource.java +++ b/core/java/android/security/net/config/KeyStoreCertificateSource.java @@ -47,9 +47,6 @@ class KeyStoreCertificateSource implements CertificateSource { Set certificates = new ArraySet<>(mKeyStore.size()); for (Enumeration en = mKeyStore.aliases(); en.hasMoreElements();) { String alias = en.nextElement(); - if (!mKeyStore.isCertificateEntry(alias)) { - continue; - } X509Certificate cert = (X509Certificate) mKeyStore.getCertificate(alias); if (cert != null) { certificates.add(cert);