Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 285bbd97 authored by Seth Moore's avatar Seth Moore Committed by Automerger Merge Worker
Browse files

Merge "Ensure key generation retries after remote key provisioning" into... 

Merge "Ensure key generation retries after remote key provisioning" into tm-dev am: 6f2afd14 am: 240d7ddc

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/18363169



Change-Id: I1d6435eaa632cd430a687ed6580c146246d69ccb
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents 6429dc08 240d7ddc

keystore/java/android/security/keystore2/AndroidKeyStoreKeyPairGeneratorSpi.java

+8 −5
Original line number Original line Diff line number Diff line
@@ -712,7 +712,7 @@ public abstract class AndroidKeyStoreKeyPairGeneratorSpi extends KeyPairGenerato 
                case KeymasterDefs.KM_ERROR_HARDWARE_TYPE_UNAVAILABLE:

                case KeymasterDefs.KM_ERROR_HARDWARE_TYPE_UNAVAILABLE:

                    throw new StrongBoxUnavailableException("Failed to generated key pair.", e);

                    throw new StrongBoxUnavailableException("Failed to generated key pair.", e);

                case ResponseCode.OUT_OF_KEYS:

                case ResponseCode.OUT_OF_KEYS:

                    throw makeOutOfKeysException(e, securityLevel);

                    return checkIfRetryableOrThrow(e, securityLevel);

                default:

                default:

                    ProviderException p = new ProviderException("Failed to generate key pair.", e);

                    ProviderException p = new ProviderException("Failed to generate key pair.", e);

                    if ((mSpec.getPurposes() & KeyProperties.PURPOSE_WRAP_KEY) != 0) {

                    if ((mSpec.getPurposes() & KeyProperties.PURPOSE_WRAP_KEY) != 0) {
@@ -740,7 +740,7 @@ public abstract class AndroidKeyStoreKeyPairGeneratorSpi extends KeyPairGenerato 




    // In case keystore reports OUT_OF_KEYS, call this handler in an attempt to remotely provision

    // In case keystore reports OUT_OF_KEYS, call this handler in an attempt to remotely provision

    // some keys.

    // some keys.

    private ProviderException makeOutOfKeysException(KeyStoreException e, int securityLevel) {

    GenerateKeyPairHelperResult checkIfRetryableOrThrow(KeyStoreException e, int securityLevel) {

        GenerateRkpKey keyGen = new GenerateRkpKey(ActivityThread

        GenerateRkpKey keyGen = new GenerateRkpKey(ActivityThread

                .currentApplication());

                .currentApplication());

        KeyStoreException ksException;

        KeyStoreException ksException;
@@ -757,8 +757,11 @@ public abstract class AndroidKeyStoreKeyPairGeneratorSpi extends KeyPairGenerato 
                    rkpStatus = KeyStoreException.RKP_SERVER_REFUSED_ISSUANCE;

                    rkpStatus = KeyStoreException.RKP_SERVER_REFUSED_ISSUANCE;

                    break;

                    break;

                case IGenerateRkpKeyService.Status.OK:

                case IGenerateRkpKeyService.Status.OK:

                    // This will actually retry once immediately, so on "OK" go ahead and return

                    // Explicitly return not-OK here so we retry in generateKeyPair. All other cases

                    // "temporarily unavailable". @see generateKeyPair

                    // should throw because a retry doesn't make sense if we didn't actually

                    // provision fresh keys.

                    return new GenerateKeyPairHelperResult(

                            KeyStoreException.RKP_TEMPORARILY_UNAVAILABLE, null);

                case IGenerateRkpKeyService.Status.NETWORK_COMMUNICATION_ERROR:

                case IGenerateRkpKeyService.Status.NETWORK_COMMUNICATION_ERROR:

                case IGenerateRkpKeyService.Status.HTTP_CLIENT_ERROR:

                case IGenerateRkpKeyService.Status.HTTP_CLIENT_ERROR:

                case IGenerateRkpKeyService.Status.HTTP_SERVER_ERROR:

                case IGenerateRkpKeyService.Status.HTTP_SERVER_ERROR:
@@ -781,7 +784,7 @@ public abstract class AndroidKeyStoreKeyPairGeneratorSpi extends KeyPairGenerato 
                    KeyStoreException.RKP_TEMPORARILY_UNAVAILABLE);

                    KeyStoreException.RKP_TEMPORARILY_UNAVAILABLE);

        }

        }

        ksException.initCause(e);

        ksException.initCause(e);

        return new ProviderException("Failed to talk to RemoteProvisioner", ksException);

        throw new ProviderException("Failed to provision new attestation keys.", ksException);

    }

    }





    private void addAttestationParameters(@NonNull List<KeyParameter> params)

    private void addAttestationParameters(@NonNull List<KeyParameter> params)