avatar
java.security.KeyStore# Java - 爪哇娇娃
i*p
1
Android provides android.security.KeyStore. What is difference between them?
avatar
t*e
2
just pick whichever you like.
avatar
i*p
3
Do you mean java.security.KeyStore can do whatever android.security.KeyStore
does on Android?
Then why does android provide a new one?

【在 t*******e 的大作中提到】
: just pick whichever you like.
avatar
t*e
4
KeyStore is a place to store public-private key pairs, plus the
corresponding certificates. Why is Android different from the one comes with
JDK? App server vendors tend to bundle their own key stores in their products
too.
avatar
g*g
5
I would think for security reason, Google doesn't want you to
tamper the system keystore but still want to give you some restricted
access. Imagine you install an app from market, it tampers the keystore,
adds a self-signed certificate that shouldn't be trusted, intercept
your connection and start man-in-the-middle attack.

with
products

【在 t*******e 的大作中提到】
: KeyStore is a place to store public-private key pairs, plus the
: corresponding certificates. Why is Android different from the one comes with
: JDK? App server vendors tend to bundle their own key stores in their products
: too.

avatar
t*e
6
Keystore is protected by password. As long as one has the password, he can
export the key pairs and import into another keystore. Does android keystore
have anything unique?

【在 g*****g 的大作中提到】
: I would think for security reason, Google doesn't want you to
: tamper the system keystore but still want to give you some restricted
: access. Imagine you install an app from market, it tampers the keystore,
: adds a self-signed certificate that shouldn't be trusted, intercept
: your connection and start man-in-the-middle attack.
:
: with
: products

avatar
r*l
7
This is not in the public API. And it does not do what Java KeyStore is
doing. Why do you have to use it?

them?

【在 i**p 的大作中提到】
: Android provides android.security.KeyStore. What is difference between them?
avatar
i*p
8
Implement an app to read the certificates' info from Android KeyStore on the
phone.

【在 r*****l 的大作中提到】
: This is not in the public API. And it does not do what Java KeyStore is
: doing. Why do you have to use it?
:
: them?

avatar
r*l
9
Can you provide the API and/or source android.security.KeyStore, and specify
which method you plan to use to "read the certificates' info from Android
KeyStore".
I found the source code from GrepCode but I don't think that class is for
this purpose. Maybe you are talking about a totally different animal.

the

【在 i**p 的大作中提到】
: Implement an app to read the certificates' info from Android KeyStore on the
: phone.

相关阅读
logo
联系我们隐私协议©2024 redian.news
Redian新闻
Redian.news刊载任何文章,不代表同意其说法或描述,仅为提供更多信息,也不构成任何建议。文章信息的合法性及真实性由其作者负责,与Redian.news及其运营公司无关。欢迎投稿,如发现稿件侵权,或作者不愿在本网发表文章,请版权拥有者通知本网处理。