-1

What happens if one of system CA certificate got expired (GlobalSign Root CA - R2 gonna expire in 2021) in Android? How I can update to latest root CA in my android phone(user-build that never receives any OTA), if one got expired?

VivekRajendran
  • 676
  • 1
  • 6
  • 21

1 Answers1

3

You can use Google Play Services to update the devices Root-CAs and other security relevant issues.

https://developers.google.com/android/reference/com/google/android/gms/security/ProviderInstaller

try {
    ProviderInstaller.installIfNeeded(this);
} catch (GooglePlayServicesRepairableException e) {
    GoogleApiAvailability.getInstance().showErrorNotification(this, e.getConnectionStatusCode());
} catch (GooglePlayServicesNotAvailableException e) {
}

The required class should be provided with the GooglePlayServices-Base artifact:

dependencies {
    implementation 'com.google.android.gms:play-services-base:17.1.0'
}

See this article for more details.

da_berni
  • 530
  • 4
  • 12
  • Thanks for your reply. Is it applicable for system wide? or just within application? – VivekRajendran Oct 11 '19 at 05:54
  • @VivekRajendran just within the application. I don't think there is a way of updating the devices Root-CAs without rooting the whole device. – da_berni Oct 12 '19 at 10:27