I need to install hundreds of SSL certs (at retailers) - which have been issued from my own PKI - and then have my BB app talk to these guys using https. On Android and IPhone, I use OpenSSL and a root CA burned into the app. OpenSSL has a 'verification callback' that lets me tailor the standard cert validation logic and I use this callback to validate the retailer’s cert against my burned in root CA. After playing around with the BB API, I can’t find an equivalent callback. Is there a callback I’ve missed? If not, is there some way to install my root CA into the BB’s trust store when the app is installed (it’s ok if the user has to approve it manually, provided he doesn't have to go through ten warning screens)?
I’m also wondering if I can use BouncyCastle to completely replace the native BB https connection. Some forum posts seem to suggest this would work. But will RIM allow such an app into its App Store? For the record, I cannot make a connection to a common server (with a regular cert) and use that to route traffic to my retailers; my app sends credit card info and a common server would be way too vulnerable.
I'm targeting OS 5.0 and newer phones only.
