Because if we lose the changes, an updated app won't be reconsidered for
new install permissions.
Fixes: 221899913
Test: presubmit
Change-Id: Ib82189b07cf4dfd132be37fb19843d770e871f8c
Merged-In: Ib82189b07cf4dfd132be37fb19843d770e871f8c
Previously, the key pair generation would error out even if we
successfully provisioned attestation keys. Instead, we should retry
key generation after the GenerateRkpKeyService reports an OK status.
Bug: 231495834
Test: RemoteProvisionerUnitTests
Change-Id: I049294cbc7119de55b5de02499bf4609d4c6de5d
Merged-In: I049294cbc7119de55b5de02499bf4609d4c6de5d
For one of the many variants of Blend, a cut&paste error made
that the options were not passed.
This was not caught because no test exercised this.
I've added the test (in a related CL) and fixed the bug.
Bug: 178718752
Test: Ran the RS Java tests
Change-Id: Ide2fef96137ffd89e4431cf15be5df398036d909
Merged-In: Ide2fef96137ffd89e4431cf15be5df398036d909
(cherry picked from commit a2c6eb2f1a)
The value is saved in SharedPreferences. However, it will return ACCESS_UNKNOWN in several cases. We shouldn't set it as rejected automatically. We should ask user when PBAP connect.
Bug: 230712201
Test: manual
Change-Id: Ia3f373b9799cf02c47dc782688430fb234491f61
All codepaths in socket_read_all that return a negative value have
already thrown an exception. socket_read should not throw again.
This causes debuggagle apps to crash with a JNI failure if
LocalSocket#read gets an error.
Test: atest CtsNetTestCases
Bug: 229813087
Change-Id: I2a04a799d3748c221f8555fa7afc40d73f0f392c
This commit updates VPN to use an integer token to identify an IKE
Session.
This is a preparation commit to enable IKE mobility where an IKE
Session will be able to migrate to a different network and thus network
can no longer identify an IKE Session.
Bug: 192077544
Test: atest IkeV2VpnTest
Test: atest com.android.server.connectivity.VpnTest
Change-Id: I18d9a049587d7dfc05e2143320431014d053abbc
ConnectivityServiceTest builds against the latest Vpn framework code,
but when run on an older base image (eg 'S'), said framework code might
run into runtime errors calling new APIs. Until the test is decoupled,
do the SDK level check here.
Bug: 230548427
Bug: 232420362
Test: Build
Change-Id: If453e16e680f46cf2b9eb769e5607fb5513b32ac
There is already a var which is named mNetworkCapabilities in Vpn
class. In order to simply distinguish Vpn#mNetworkCapabilities and
Ikev2VpnRunner#mNetworkCapabilities, rename the one in
Ikev2VpnRunner to mUnderlyingNetworkCapabilities, also change
Ikev2VpnRunner#mLinkProperties to mUnderlyingLinkProperties.
Bug: 191413541
Test: atest FrameworksNetTest#VpnTest
Change-Id: I49a5aee159baa1d1583abb94d73da9fbc03ffe07
Implement support for the X25519 key agreement functionality.
Similar to Ed25519, two new classes are added:
* AndroidKeyStoreXDHPrivateKey
* AndroidKeyStoreXDHPublicKey
The private key class is simply a handle to the KeyMint key.
The public key class implements XECPublicKey, the interface
needed for using this key in a platform-backed key agreement.
Because of Conscrypt API boundaries, the functionality of Conscrypt's
OpenSSLX25519PublicKey is duplicated here - namely, matching the
prefix of the encoded key.
Bug: 194359292
Test: atest android.keystore.cts.Curve25519Test
Change-Id: Ifc12be528ab544fd6909bb0dd6224a0a4dd400c6
Merged-In: Ifc12be528ab544fd6909bb0dd6224a0a4dd400c6
