commit | 22ecf5b84e5bd6971587c4d3c7e32bd1b1bb28a9 | [log] [tgz] |
---|---|---|
author | Karsten Tausche <karsten@fairphone.com> | Fri Jul 07 13:49:07 2023 +0200 |
committer | Karsten Tausche <karsten@fairphone.com> | Fri Jul 07 13:49:07 2023 +0200 |
tree | 97683a30fb986135d2c186baac816e5abff2a98b | |
parent | 6a761d62e559e9c865111e1bc3a756c9bfe78f30 [diff] | |
parent | 6fd2027e2c13b1cc6210aa388de6f2dda404c4f9 [diff] |
Merge tag 'android-13.0.0_r52' into int/13/fp3 Android 13.0.0 Release 52 (TQ3A.230605.012) * tag 'android-13.0.0_r52': [DO NOT MERGE] Ignore MetricsTest on CTS 12. [DO NOT MERGE] Ignore MetricsTest on CTS 13. [DO NOT MERGE] Ignore MetricsTest on CTS 12. Make SSLSocketTest agnostic about whether TLSv1 is supported. [DO NOT MERGE] CTS 10: Work around blocklist class name change. [DO NOT MERGE] CTS 10: Work around ConscryptHostnameVerifier changes. [DO NOT MERGE] CTS 10: Add key size for XDH. [DO NOT MERGE] CTS 10: Remove invalid count check of unwrap calls. [DO NOT MERGE] CTS 11: Work around blocklist class name change. [DO NOT MERGE] CTS 11: Work around ConscryptHostnameVerifier changed. [DO NOT MERGE] CTS 11: Add key size for XDH. [DO NOT MERGE] CTS 11: Remove invalid count check of unwrap calls. Make testing of handshake session cipher suite consistent. CipherTest should skip unknown algorithms Clean up EXPECTED_BLOCK_SIZE Cherry-pick test changes to android10-tests-dev Change-Id: Iebe5b3456cef29fa7354d992cc68ecc1dec01e35
Conscrypt is a Java Security Provider (JSP) that implements parts of the Java Cryptography Extension (JCE) and Java Secure Socket Extension (JSSE). It uses BoringSSL to provide cryptographic primitives and Transport Layer Security (TLS) for Java applications on Android and OpenJDK. See the capabilities documentation for detailed information on what is provided.
The core SSL engine has borrowed liberally from the Netty project and their work on netty-tcnative, giving Conscrypt
similar performance.
Conscrypt supports Java 7 or later on OpenJDK and Gingerbread (API Level 9) or later on Android. The build artifacts are available on Maven Central.
You can download the JARs directly from the Maven repositories.
The OpenJDK artifacts are platform-dependent since each embeds a native library for a particular platform. We publish artifacts to Maven Central for the following platforms:
Classifier | OS | Architecture |
---|---|---|
linux-x86_64 | Linux | x86_64 (64-bit) |
osx-x86_64 | Mac | x86_64 (64-bit) |
windows-x86 | Windows | x86 (32-bit) |
windows-x86_64 | Windows | x86_64 (64-bit) |
Use the os-maven-plugin to add the dependency:
<build> <extensions> <extension> <groupId>kr.motd.maven</groupId> <artifactId>os-maven-plugin</artifactId> <version>1.4.1.Final</version> </extension> </extensions> </build> <dependency> <groupId>org.conscrypt</groupId> <artifactId>conscrypt-openjdk</artifactId> <version>2.5.2</version> <classifier>${os.detected.classifier}</classifier> </dependency>
Use the osdetector-gradle-plugin (which is a wrapper around the os-maven-plugin) to add the dependency:
buildscript { repositories { mavenCentral() } dependencies { classpath 'com.google.gradle:osdetector-gradle-plugin:1.4.0' } } // Use the osdetector-gradle-plugin apply plugin: "com.google.osdetector" dependencies { compile 'org.conscrypt:conscrypt-openjdk:2.5.2:' + osdetector.classifier }
For convenience, we also publish an Uber JAR to Maven Central that contains the shared libraries for all of the published platforms. While the overall size of the JAR is larger than depending on a platform-specific artifact, it greatly simplifies the task of dependency management for most platforms.
To depend on the uber jar, simply use the conscrypt-openjdk-uber
artifacts.
<dependency> <groupId>org.conscrypt</groupId> <artifactId>conscrypt-openjdk-uber</artifactId> <version>2.5.2</version> </dependency>
dependencies { compile 'org.conscrypt:conscrypt-openjdk-uber:2.5.2' }
The Android AAR file contains native libraries for x86, x86_64, armeabi-v7a, and arm64-v8a.
dependencies { implementation 'org.conscrypt:conscrypt-android:2.5.2' }
If you are making changes to Conscrypt, see the building instructions.