How To Programmatically Install A Ca Certificate (for Eap Wifi Configuration) In Android?

My objective: Create an EAP WiFi configuration - including the CA Certificate - in Android programmitcally. Problem: How do I install a CA Certificate programmatically (and then re

Solution 1:

You cannot install it directly since non-system applications don't have access to the key store. On ICS, there is an API for this KeyChain.createInstallIntent() that would launch a system dialog asking the user whether they want to install the certificate. On pre-ICS you can achieve the same thing by launching the install intent using the component name directly (this may or may not work on all devices though). Going through the browser is actually a roundabout way of doing the same thing.

As for your questions:

1. you cannot specify/force a name. Why do you care about the actual name?
2. Not really through the browser. If you use the system intent, you can return to your activity and will get a callback if you use startActivityForResult().

Update: Android 4.3 has WifiEnterpriseConfig which both creates a profile and installs keys and certificates in the system credential store. You only need the CHANGE_WIFI_STATE permission.

Solution 2:

I am currently looking to solve the same issues. The best thing that I have found is KeyChain.choosePrivateKeyAlias() allowing the user to select which certificate to use for the SSL. From there you can retrieve the Alias name and pass it to the enterprise wifi configuration.

Solution 3:

I'm looking for the same... as for your question, @Nikolay:

you cannot specify/force a name. Why do you care about the actual name?

The EAP profile needs the name of the already-installed-CA. If you look at the example in part 4, you can specify:

finalStringENTERPRISE_CA_CERT="";

In the example, the profile does not use the CA name, but that could be the case for other EAP profiles.