blob: 20c94c5946d78a64366f9bea66537dfadd19e386 [file] [log] [blame]
Brian Carlstromb9a07c12011-04-11 09:03:51 -07001/*
2 * Copyright (C) 2011 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16package android.security;
17
Zoltan Szatmary-Banf0ae1352014-08-18 10:48:33 +010018import android.content.pm.ParceledListSlice;
19
Brian Carlstromb9a07c12011-04-11 09:03:51 -070020/**
21 * Caller is required to ensure that {@link KeyStore#unlock
22 * KeyStore.unlock} was successful.
23 *
24 * @hide
25 */
26interface IKeyChainService {
Brian Carlstrom2627d532011-05-13 12:54:24 -070027 // APIs used by KeyChain
Kenny Root5423e682011-11-14 08:43:13 -080028 String requestPrivateKey(String alias);
Fred Quintanaab8b84a2011-07-13 14:55:39 -070029 byte[] getCertificate(String alias);
Brian Carlstrom2627d532011-05-13 12:54:24 -070030
31 // APIs used by CertInstaller
32 void installCaCertificate(in byte[] caCertificate);
33
Bernhard Bauer26408cc2014-09-08 14:07:31 +010034 // APIs used by DevicePolicyManager
35 boolean installKeyPair(in byte[] privateKey, in byte[] userCert, String alias);
36
Brian Carlstrom2627d532011-05-13 12:54:24 -070037 // APIs used by Settings
Brian Carlstrom6da00332011-06-26 21:08:03 -070038 boolean deleteCaCertificate(String alias);
Brian Carlstrom2627d532011-05-13 12:54:24 -070039 boolean reset();
Zoltan Szatmary-Banf0ae1352014-08-18 10:48:33 +010040 ParceledListSlice getUserCaAliases();
41 ParceledListSlice getSystemCaAliases();
42 boolean containsCaAlias(String alias);
43 byte[] getEncodedCaCertificate(String alias, boolean includeDeletedSystem);
44 List<String> getCaCertificateChainAliases(String rootAlias, boolean includeDeletedSystem);
Fred Quintanaab8b84a2011-07-13 14:55:39 -070045
46 // APIs used by KeyChainActivity
47 void setGrant(int uid, String alias, boolean value);
48 boolean hasGrant(int uid, String alias);
Brian Carlstromb9a07c12011-04-11 09:03:51 -070049}