Manage encryption certificate chain

Question

Apparently, native E-Mail application on ios 8.0 - 8.2 is unable to remove and replace an existing S/MIME public key encryption.
For example, Mr. X sent me an E-Mail with his new trusted certificate as part of the E-Mail S/Mime signature. Because I have previously added his trusted signature from last year, I am unable to click on "install" to replace the existing trusted certficate chain.
I have attempted to reset the settings on ios 8.2 to no avail and even remove all E-Mail service.
I am able to add and remove my own or other's S/MiMe profiles but not the individually added E-Mail encryption certificate where the public key is received as part of the E-Mail signing certificate from other E-Mail users.
Anyone know how to reset the functionality, remove existing encryption chain or make the S/MiME Certificate "Install" to work again?
Reference:
http://support.apple.com/en-us/HT202345

Answer 1

Hummm let me make sure I understand what your saying. It sounds as if you want
to find a portable way of using this particular class. A way that will work
regardless of what JCE provider is installed on the machine running your code?
If that is correct then unfortunately your SOL. The problem is that there is no
public code (interfaces or other) which are defined in the standard Java API
to define this type of class. As a result no matter what you try and do you are
going to have to hard code some class like the boucycastle class.
My recommendation to you would be to include the bouncycastle ASN package with
your code. They do not have to use the BouncyCastle JCE provider but the bouncy
castle code must be in their class path...
Of course you could write your own ASN/DER package and include that instead but
you'll probably find it easier to just include the BC code base in your
distribution. If that distribution is webstart or applet then maybe you trim it
down in size by just including the ASN package and classes that are required by it.