tree 9661fe29e6050fe65dcd2e41349f6f89d405a22d
parent 92906298d771e80be9c748cb44ce3cbfece11c96
author Hai Shalom <haishalom@google.com> 1679609023 +0000
committer Hai Shalom <haishalom@google.com> 1680195904 +0000

[TOFU] Implement server cert pinning

Implement server certificate pinning to allow more flexibility for
misconfigured networks with only leaf certificates or missing
certificates in the chain (e.g. Root CA cert missing). The user
will be asked if they trust the network provided all the details
available, and if they do, then the server validation will be done
by calculating the server certificate hash and comparing it to the
value approved by the user.

Bug: 272394882
Test: atest SupplicantStaNetworkCallbackAidlImplTest
Test: atest InsecureEapNetworkHandlerTest WifiConfigManagerTest
Test: atest ClientModeImplTest CertificateEventInfoTest
Test: Testing with various misconfigured networks and confirm
connection after approving.

Merged-In: I0694c8d3fff7b7b94004f1eaf683827f15492240
Change-Id: I8697b8100630347006770549c81bc0c0a401d06a