PawletOS/app_Settings
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Support installation of the new app source certificate

Browse Source 
The new certificate can be installed from Settings ("Install a
certificate > App Source certificate").  The installation flow includes
a warning with user authorization to proceed, then a prompt for reboot
(now or later).

Installed certificate can be managed in "User credentials".  The name is
currently a hash of hex numbers.

Upon deletion, there will also be a promot for reboot (now or later).

Test: Only see the new setting entry if feature is enabled
Test: Install from Settings, see the expected file name in
      /data/misc/keysetore/user_0.  Reboot also works.
Test: Able to see the certificate in Settings after installed
Test: Able to delete the certificate, which triggers confirmation dialog
      to reboot.  Reboot works.
Test: add certificate, see dialog, "not now" / tapping elsewhere does
      nothing
Test: atest RestrictedEncryptionPreferenceControllerTest
Bug: 112038744

Change-Id: I7a4494ea0f243730df2212076588074d8774ae23
This commit is contained in:
Victor Hsieh
2019-10-30 15:35:19 -07:00
parent 9f5fc3c6da
commit c8a1960cf4
14 changed files with 373 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
res/values/strings.xml
View File

@@ -5902,6 +5902,8 @@
<string name="credential_for_vpn_and_apps">Installed for VPN and apps</string>
<!-- Sub-heading for a user credential installed to be used as part of a Wi-Fi configuration. [CHAR LIMIT=NONE]. -->
<string name="credential_for_wifi">Installed for Wi-Fi</string>
<!-- Sub-heading for a user credential installed to be used by kernel for fs-verity verification [CHAR LIMIT=NONE]. -->
<string name="credential_for_fsverity">Installed for app install source verification</string>
<!-- Description of dialog to reset credential storage [CHAR LIMIT=NONE] -->
<string name="credentials_reset_hint">Remove all the contents?</string>
<!-- Toast message [CHAR LIMIT=30] -->
@@ -5916,14 +5918,20 @@
<string name="user_certificate">VPN &amp; app user certificate</string>
<!-- Title of Wi-Fi certificate [CHAR LIMIT=30] -->
<string name="wifi_certificate">Wi\u2011Fi certificate</string>
<!-- Title of App Source certificate [CHAR LIMIT=30] -->
<string name="app_src_certificate">App Source certificate</string>
<!-- Title of warning shown to the user before they can install a CA certificate [CHAR LIMIT=NONE] -->
<string name="ca_certificate_warning_title">Your privacy is at risk</string>
<!-- Description of warning shown to the user before they can install a CA certificate [CHAR LIMIT=NONE] -->
<string name="ca_certificate_warning_description">CA certificates are used by websites, apps, and VPNs for encryption. Only install CA certificates from organizations you trust. \n\n If you install a CA certificate, the certificate owner could access your information, such as passwords, messages, or credit card details, from websites you visit or apps you use - even if that information is encrypted.</string>
<!-- Label for button to not install a CA certificate [CHAR_LIMIT=50] -->
<string name="ca_certificate_warning_dont_install">Don\u2019t install</string>
<!-- Label for button to continue installing a CA certificate [CHAR_LIMIT=50] -->
<string name="ca_certificate_warning_install_anyway">Install anyways</string>
<!-- Label for button to not install a certificate [CHAR_LIMIT=50] -->
<string name="certificate_warning_dont_install">Don\u2019t install</string>
<!-- Label for button to continue installing a certificate [CHAR_LIMIT=50] -->
<string name="certificate_warning_install_anyway">Install anyways</string>
<!-- Title of warning shown to the user before they can install an App Source certificate [CHAR LIMIT=50] -->
<string name="app_src_certificate_warning_title">Install this certificate at your own risk</string>
<!-- Description of warning shown to the user before they can install an App Source certificate [CHAR LIMIT=NONE] -->
<string name="app_src_certificate_warning_description">App source certificates verify that apps are safe for your device. Only install certificates from organizations you trust.</string>
<!-- Toast message that a certificate was not installed -->
<string name="cert_not_installed">Certificate not installed</string>
@@ -6549,14 +6557,28 @@
<string name="one_usercrt">one user certificate</string>
<!-- Item found in the PKCS12 keystore being investigated [CHAR LIMIT=NONE] -->
<string name="one_cacrt">one CA certificate</string>
<!-- Item found in thee PKCS12 keystore being investigated [CHAR LIMIT=NONE]-->
<!-- Item found in the PKCS12 keystore being investigated [CHAR LIMIT=NONE]-->
<string name="n_cacrts">%d CA certificates</string>
<!-- Item found in the PKCS12 keystore being investigated [CHAR LIMIT=NONE] -->
<string name="one_appsrccrt">one App Source certificate</string>
<!-- Alert dialog when viewing a set of user credentials. -->
<string name="user_credential_title">Credential details</string>
<!-- Announcement to confirm a user credential being removed. [CHAR LIMIT=NONE] -->
<string name="user_credential_removed">Removed credential: <xliff:g id="credential_name" example="signing key">%s</xliff:g></string>
<!-- Placeholder for the list of installed user credentials (private keys) when the list is empty. [CHAR LIMIT=120] -->
<string name="user_credential_none_installed">No user credentials installed</string>
<!-- Title of alert dialog after an app source certificate is installed. [CHAR LIMIT=45] -->
<string name="app_src_cert_reboot_dialog_install_title">Restart to use certificate</string>
<!-- Message of alert dialog after an app source certificate is installed. [CHAR LIMIT=NONE] -->
<string name="app_src_cert_reboot_dialog_install_message">To use this app source certificate, you need to restart your device</string>
<!-- Title of alert dialog after an app source certificate is deleted. [CHAR LIMIT=45] -->
<string name="app_src_cert_reboot_dialog_uninstall_title">Restart to finish uninstalling</string>
<!-- Message of alert dialog after an app source certificate is deleted. [CHAR LIMIT=NONE] -->
<string name="app_src_cert_reboot_dialog_uninstall_message">To uninstall this app source certificate, you need to restart your device</string>
<!-- Button to restart the device. [CHAR LIMIT=25] -->
<string name="app_src_cert_reboot_dialog_button_restart">Restart</string>
<!-- Button to skip restarting the device. [CHAR LIMIT=25] -->
<string name="app_src_cert_reboot_dialog_button_not_now">Not now</string>
<!-- Title for spell checker settings -->
<string name="spellcheckers_settings_title">Spell checker</string>