No, there is no way, even with private APIs, for a user application to
access certificates before the KeyChain API. They were previously only
accessible by system user by VPN and WiFi.

Apps can of course use certificates within their own process. For an
example, see the X509TrustManager and X509KeyManager (usage example at
http://developer.android.com/reference/javax/net/ssl/HttpsURLConnection.html)

-bri

On Tue, Aug 28, 2012 at 6:39 PM, Shu Sang <[email protected]> wrote:
> I try to access PKI secured services on Android using Java. Certificates were 
> installed on devices through settings->location & security ->Install from SD 
> card.
>
> Seems like on ICS, certificates are shared under /system/etc/security/cacerts 
> while on GingerBread they are in a keystore: /system/etc/security/cacerts.bks.
>
> On ICS I found the KeyChain can read all the installed certificates, so my 
> question is:
>
> Is there a way to access certificates installed from SD card on OS < level 14?
>
> or
>
> If there is a unified way to access certificates installed from SD card on OS 
> >= level 8?
>
> Thanks.
>
> --
> You received this message because you are subscribed to the Google Groups 
> "Android Security Discussions" group.
> To view this discussion on the web visit 
> https://groups.google.com/d/msg/android-security-discuss/-/co2ytbvSO5QJ.
> To post to this group, send email to 
> [email protected].
> To unsubscribe from this group, send email to 
> [email protected].
> For more options, visit this group at 
> http://groups.google.com/group/android-security-discuss?hl=en.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Android Security Discussions" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/android-security-discuss?hl=en.

Reply via email to