Listing all installed certificates on android

Question

I am writing an app which lists all the certificates installed on the device. But I found that there are two places where certificates are stored:

1. System/etc/security/cacerts.bks: This file contains list of all pre-installed certificate. I am able to read this file using Keystore class defined in frameworks/ base/keystore/java/android/security.

2. data/misc/keystore: Another way to install certificates (e.g. through certinstaller app) installs third party certificate and makes its entry in this directory.

But I am not getting how to read certificate info like SerialNumber, IssuerDN etc. from this file.

Answer 1

I use the below code snippet to list

public void PrintInstalledCertificates() {     try {         KeyStore ks = KeyStore.getInstance("AndroidCAStore");              if (ks != null) {             ks.load(null, null);             Enumeration<String> aliases = ks.aliases();                      while (aliases.hasMoreElements()) {                  String alias = (String) aliases.nextElement();                  java.security.cert.X509Certificate cert = (java.security.cert.X509Certificate) ks.getCertificate(alias);                 //To print System Certs only                 if(cert.getIssuerDN().getName().contains("system")){                     System.out.println(cert.getIssuerDN().getName());                 }                  //To print User Certs only                  if(cert.getIssuerDN().getName().contains("user")){                     System.out.println(cert.getIssuerDN().getName());                 }                  //To print all certs                 System.out.println(cert.getIssuerDN().getName());             }         }     } catch (IOException e) {         e.printStackTrace();     } catch (KeyStoreException e) {         e.printStackTrace();     } catch (NoSuchAlgorithmException e) {         e.printStackTrace();     } catch (java.security.cert.CertificateException e) {         e.printStackTrace();     }                }