Merge "Only use concscrypt certs if directory is nonempty"

This commit is contained in:
Miguel Aranda
2023-01-12 10:16:03 +00:00
committed by Gerrit Code Review

View File

@@ -41,7 +41,7 @@ public final class SystemCertificateSource extends DirectoryCertificateSource {
private static File getDirectory() { private static File getDirectory() {
// TODO(miguelaranda): figure out correct code path. // TODO(miguelaranda): figure out correct code path.
File updatable_dir = new File("/apex/com.android.conscrypt/cacerts"); File updatable_dir = new File("/apex/com.android.conscrypt/cacerts");
if (updatable_dir.exists()) { if (updatable_dir.exists() && !(updatable_dir.list().length == 0)) {
return updatable_dir; return updatable_dir;
} }
return new File(System.getenv("ANDROID_ROOT") + "/etc/security/cacerts"); return new File(System.getenv("ANDROID_ROOT") + "/etc/security/cacerts");