将来のアンドロイドとその管理に証明書を保存する適切な方法

Question

私は1つの.pfx aと.cer証明書を持っています。最初のデータは署名用データで、もう1つはSSLを開くためのものです。

アンドロイドに証明書を保存するにはどうすればよいですか？

• 私はそれらをres/rawまたはassetでKeystoreに配置する必要がありますか？
• res/assetsに1つのファイルとして保存する必要がありますか？
• 将来の変更を管理するために、それらを保存する最も効率的な方法は何ですか？そうすることの

私の現在の方法は：

 // Create Keystore containing servers certificate 
     KeyStore keyStore = KeyStore.getInstance("BKS"); 

     // Different versions of Android use different BKSs 
     // Need to export both versions using Portacle (1.9 worked for me) 
     int bks_version; 
     if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.JELLY_BEAN_MR1) { 
      bks_version = R.raw.keystore; //The BKS file 
     } else { 
      bks_version = R.raw.keystorev1; //The BKS (v-1) file 
     } 

     keyStore.load(activity.getResources().openRawResource(bks_version), "password"); 

Answer 1

は、私はそのような個人的な署名のSSLおよびPFXまたはP12のためのCAとしての私の証明書を管理するクラスを書きました。

内部ストレージを使用してKeyStoreを構築しました。 私がどこにいるのか、PFXのエイリアスを知りたいのであれば、それを知っておく必要があります。私はまだこの問題をAndroidで処理する方法を理解していません。

public class CertificateManager { 
private static final String CUSTOMER_CERTIFICATE_STORE = "CustomerKeyStore.keystore"; 
private static final String CUSTOMER_CERTIFICATE_ALIAS = "CZ1212121218"; 
private static final String CUSTOMER_KS_PASSWORD = "eet"; 

private static final String SERVER_CERTIFICATE_STORE = "ServerKeyStore.keystore"; 
private static final String SERVER_CERTIFICATE_ALIAS = "ca"; 
private static final String SERVER_KS_PASSWORD = "eet"; 

/** 
* Get Customer's Keystore, containing personal certificate. 
* @param context 
* @return Customer's Keystore 
*/ 
private static KeyStore getCustomerKeystore(Context context){ 
    try { 
     KeyStore keyStore = KeyStore.getInstance("PKCS12"); 
     // Load Keystore form internal storage 
     FileInputStream fis = context.openFileInput(CUSTOMER_CERTIFICATE_STORE); 
     keyStore.load(fis, CUSTOMER_KS_PASSWORD.toCharArray()); 
     return keyStore; 
    } catch (Exception e) { 
     e.printStackTrace(); 
     throw new RuntimeException("Keystore not found."); 
    } 
} 

/** 
* Get customer's certificate for signature. 
* @param context 
* @return Customer's certificate 
*/ 
public static X509Certificate getCustomersCertificate(Context context){ 
    try { 
     KeyStore keyStore= getCustomerKeystore(context); 

     KeyStore.PrivateKeyEntry keyEntry = (KeyStore.PrivateKeyEntry) keyStore.getEntry(
         CUSTOMER_CERTIFICATE_ALIAS, 
         new KeyStore.PasswordProtection(CUSTOMER_KS_PASSWORD.toCharArray()) 
     ); 

     return (X509Certificate) keyEntry.getCertificate(); 
    } catch (Exception e) { 
     // Keystore not found ask user for uploading his certificate. 
     e.printStackTrace(); 
     throw new RuntimeException("Wrong KeyStore"); 
    } 
} 

/** 
* Get customer's PrivateKey for encryption. 
* @param context 
* @return customer's PrivateKey 
*/ 
public static PrivateKey getCustomersPrivateKey(Context context){ 
    try { 
     KeyStore keyStore= getCustomerKeystore(context); 

     //return customer's certificate 
     return (PrivateKey)keyStore.getKey(CUSTOMER_CERTIFICATE_ALIAS, CUSTOMER_KS_PASSWORD.toCharArray()); 
    } catch (Exception e) { 

     e.printStackTrace(); 
     throw new RuntimeException("Wrong KeyStore"); 
    } 
} 

/** 
* Loads Customer .p12 or .pfx certificate to keystore with password to Internal Storage 
* @param context 
* @return customer's PrivateKey 
*/ 
public static void loadCustomerCertificate(Context context, InputStream inputStream) throws Exception{ 
    KeyStore keyStore = KeyStore.getInstance("pkcs12"); 
    keyStore.load(inputStream, CUSTOMER_KS_PASSWORD.toCharArray()); 

    //Save KeyStore in Internal Storage 
    FileOutputStream fos = context.openFileOutput(CUSTOMER_CERTIFICATE_STORE, Context.MODE_PRIVATE); 
    keyStore.store(fos, CUSTOMER_KS_PASSWORD.toCharArray()); 
    fos.close(); 
} 

/** 
* Server certificate for SLL communication 
* @param context 
* @return HTTPS TrustStore 
*/ 
public static KeyStore getServerKeystore(Context context){ 
    try { 
     KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType()); 

     // Load Keystore form internal storage 
     FileInputStream fis = context.openFileInput(SERVER_CERTIFICATE_STORE); 
     keyStore.load(fis, SERVER_KS_PASSWORD.toCharArray()); 
     return keyStore; 
    } catch (Exception e) { 
     e.printStackTrace(); 
     throw new RuntimeException("Keystore not found."); 
    } 
} 

/** 
* Load Server certificate for SLL communication 
* @param context 
* @param inputStream server trusted CAs 
*/ 
public static void loadServerKeystore(Context context, InputStream inputStream) throws Exception{ 
    // Load CAs from an InputStream 
    CertificateFactory cf = CertificateFactory.getInstance("X.509"); 
    Certificate ca = cf.generateCertificate(inputStream); 
    inputStream.close(); 

    // Create a KeyStore containing our trusted CAs 
    KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType()); 
    keyStore.load(null, null); 
    keyStore.setCertificateEntry(SERVER_CERTIFICATE_ALIAS, ca); 

    // Save keystore to Internal Storage. 
    FileOutputStream fos = context.openFileOutput(SERVER_CERTIFICATE_STORE, Context.MODE_PRIVATE); 
    keyStore.store(fos, SERVER_KS_PASSWORD.toCharArray()); 
    fos.close(); 
}