From f075536ebed2126779b0b58b3dced51a0dae14e9 Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Mon, 13 Aug 2012 18:43:29 +0200
Subject: [PATCH] Function to get only system-wide CA certificates added to
 TrustedCertificateManager

---
 .../logic/TrustedCertificateManager.java      | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/src/frontends/android/src/org/strongswan/android/logic/TrustedCertificateManager.java b/src/frontends/android/src/org/strongswan/android/logic/TrustedCertificateManager.java
index 74868dc447..95fdecf14d 100644
--- a/src/frontends/android/src/org/strongswan/android/logic/TrustedCertificateManager.java
+++ b/src/frontends/android/src/org/strongswan/android/logic/TrustedCertificateManager.java
@@ -190,6 +190,25 @@ public class TrustedCertificateManager
 		return certs;
 	}
 
+	/**
+	 * Get only the system-wide CA certificates.
+	 * @return Hashtable mapping aliases to certificates
+	 */
+	public Hashtable<String, X509Certificate> getSystemCACertificates()
+	{
+		Hashtable<String, X509Certificate> certs = new Hashtable<String, X509Certificate>();
+		this.mLock.readLock().lock();
+		for (String alias : this.mCACerts.keySet())
+		{
+			if (alias.startsWith("system:"))
+			{
+				certs.put(alias, this.mCACerts.get(alias));
+			}
+		}
+		this.mLock.readLock().unlock();
+		return certs;
+	}
+
 	/**
 	 * Get only the CA certificates installed by the user.
 	 * @return Hashtable mapping aliases to certificates
-- 
2.47.2