[PATCH] Add Android keystore support

[David Woodhouse]

On Thu, 2011-12-29 at 01:22 +0000, Vilmos Nebehaj wrote:
> Good point.  I refactored certificate handling in ssl.c, attaching
> revised patch. 

Six months later, I've finally committed something based on this;
thanks. It works like wpa_supplicant does on Android — if a "filename"
starts with "keystore:" then it uses the keystore for it, otherwise it
treats it as a filename as usual. I've implemented it for both OpenSSL
and GnuTLS, although we don't use GnuTLS on Android.

This is consistent with our handling of pkcs11: for PKCS#11 tokens, too.

I've also updated Android.mk and included it in the release tarball,
although it doesn't actually build here because my Android build tree is
a little buggered. Should I be able to install an NDK with libxml2 and
the other requirements, and build this simply? Or does it require a full
CyanogenMod/AOSP build?

-- 
dwmw2
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6171 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20120615/85fb5726/attachment.bin>