Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Clarify how to replace cert generated by Android Keystore.

Browse Source 
This updates Android Keystore developer documentation to clarify how
to replace the self-signed certificate create by Android Keystore when
it generates a new key pair. Some developers are attempting to use
KeyStore.setCertificateEntry which is the wrong method for this. The
correct method is KeyStore.setKeyEntry.

Bug: 28152878
Change-Id: I306447b7792ecad5fbb49bd691a57bedb5207003
This commit is contained in:
Alex Klyubin
2016-04-13 15:33:53 -07:00
parent e502345d71
commit a65707d3f3
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
docs/html/training/articles/keystore.jd
View File

@@ -152,8 +152,10 @@ and {@link java.security.KeyPairGenerator} or
<p>Generating a new {@link java.security.PrivateKey} requires that
you also specify the initial X.509 attributes that the self-signed
certificate will have. You can replace the certificate at a later
time with a certificate signed by a Certificate Authority.</p>
certificate will have. You can use
{@link java.security.KeyStore#setKeyEntry(String, java.security.Key, char[], java.security.cert.Certificate[]) KeyStore.setKeyEntry}
to replace the certificate at a later time with a certificate signed
by a Certificate Authority (CA).</p>
<p>To generate the key, use a {@link java.security.KeyPairGenerator}
with {@link android.security.KeyPairGeneratorSpec}:</p>