blob: 99329fec0c9d1963ee249eb7b578fb12080a38fb (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
|
Requires BouncyCastle provider
Note: version 1.46 is required (as Android also uses this version)
For non-selfsigned certificates, the root certificate of the CA has to be included (CACert: class 1 and 3 certs)
CERTSTORE=res/raw/deki_eu.bks
keytool -import -v -trustcacerts -alias 0 -file <(openssl x509 -in cacert-root1.crt) -keystore $CERTSTORE -storetype BKS -provider org.bouncycastle.jce.provider.BouncyCastleProvider -providerpath /tmp/bcprov-jdk15on-147.jar -storepass abcdefg
keytool -import -v -trustcacerts -alias 1 -file <(openssl x509 -in cacert-root3.crt) -keystore $CERTSTORE -storetype BKS -provider org.bouncycastle.jce.provider.BouncyCastleProvider -providerpath /tmp/bcprov-jdk15on-147.jar -storepass abcdefg
keytool -import -v -trustcacerts -alias 2 -file <(openssl x509 -in deki.eu.crt) -keystore $CERTSTORE -storetype BKS -provider org.bouncycastle.jce.provider.BouncyCastleProvider -providerpath /tmp/bcprov-jdk15on-147.jar -storepass abcdefg
(see also: http://blog.crazybob.org/2010/02/android-trusting-ssl-certificates.html )
|
