tree c9422dbafa34da263cf18f2fa4da4cb28891c18a
parent e58ce8ace5b8dca6ebe8744dfa6ac687f0d50042
author Eran Messeri <eranm@google.com> 1600103516 +0100
committer android-build-team Robot <android-build-team-robot@google.com> 1602551290 +0000

Install CA certificates into KeyStore

When the user installs a CA certificate (via Settings), store that
certificate into the system KeyStore.

This is necessary for it to be available as a VPN trust anchor.
Note that this is a temporary fix and long-term the user should install
VPN trust anchor separately of CA certificates. Particularly in the
context of VPN, it's undesirable for the VPN provider's endpoint
authentication certificate to also be a root CA on the device, as all
traffic goes through the VPN.

Test: Manual, installed CA certificate via cert installer and ensured it's available in VPN settings.
Bug: 163413737
Change-Id: Ib6a308177b7ce6c55fb45af9809e0efc5c48a079
(cherry picked from commit a21a521ae9c1fbd099f0fd84df8776a0c1c020f8)
(cherry picked from commit 6d6ea3f68307b3bf41bf22bfcbc0f1290a56c14b)