3 Commits

Author	SHA1	Message	Date
Kenny Root	802768dd86	Add ability to replace chain for PrivateKeyEntry ... For the AndroidKeyStore API, allow entries to have their certificate chain replaced without destroying the underlying PrivateKey. Since entries are backed by unexportable private keys, requiring them to be supplied again doesn't make sense and is impossible. Change-Id: I629ce2a625315c8d8020a082892650ac5eba22ae	2012-08-22 13:03:30 -07:00
Kenny Root	db026710ec	Add KeyPairGenerator for Android keystore ... This allows end-users to generate keys in the keystore without the private part of the key ever needing to leave the device. The generation process also generates a self-signed certificate. Change-Id: I114ffb8e0cbe3b1edaae7e69e8aa578cb835efc9	2012-08-22 08:52:55 -07:00
Kenny Root	e29df16cb5	Add AndroidKeyStore provider for KeyStore API ... This introduces a public API for the Android keystore that is accessible via java.security.KeyStore API. This allows programs to store PrivateKeyEntry and TrustedCertificateEntry items visible only to themselves. Future work should include: * Implement KeyStore.CallbackHandlerProtection parameter to allow the caller to request that the keystore daemon unlock itself via the system password input dialog. * Implement SecretKeyEntry once that support is in keystore daemon Change-Id: I382ffdf742d3f9f7647c5f5a429244a340b6bb0a	2012-08-20 12:44:40 -07:00