TLS/SSL client authentication using a client certificate which comes available at runtime Android/Java

Question

Suppose I have an application which in some way retrieves a client certificate (private/public key pair) at runtime via a secure channel (so I don't have this client certificate at build time).

How can I use this client certificate for client authentication without using keytool and not using some on persistent/ondisk keystore. So I do not want (actually I can't) to import it using a command line keytool?

Actually I want to replicate the functionality done in libcurl. You just set the client certificate (with private key) and your done. It doesn't involve a keystore.

All this has to be done in Java/Android.

Answer 1

You can do it in Java by defining your own KeyManager as described in the JSSE Reference Guide. I can't speak for Android.