Google Git
Sign in
android / platform / external / conscrypt / 506e6f61f6e6266e090ba23d56b8f4190ec06766
commit506e6f61f6e6266e090ba23d56b8f4190ec06766[log] [tgz]
authorPete Bentley <prb@google.com>Mon Dec 07 13:45:14 2020 +0000
committerPete Bentley <prb@google.com>Mon Dec 07 14:15:09 2020 +0000
tree02acc9fac89c15bc760c9601c6a179c7038f02a7
parente54bd0068d5dd1bbad004afce8b7dac55902b984 [diff]
Merge Conscrypt upstream master.

Contains the following relevant upstream commits:
         0080d512 Reimplement ConscryptStatsLog.java with reflection
         fc9750b7 Add a stub for android.util.StatsEvent.
         2d1a647a Replace set-env commands with redirect to
         4f56a05e Use precalculated ByteArray.hashCode before comparing byte arrays
         075f5a9f Add AES-GCM-SIV to capabilities
         46ed27fd Remove instanceOf assertions
         27bf3ae2 Flip isAssignableFrom checks in OpenSSLECKeyFactory and OpenSSLRSAKeyFactory
         d798048a Fix the return type of NativeCrypto_X509_check_issued.
         6b061c2d Fix pathlen handling given other invalid extensions.
         70ce1de5 Fix current version in README.md.
         973dd694 Skip testing AES/GCM-SIV/NoPadding on BC.

Bug: 160345816
Test: atest CtsLibcoreTestCases CtsLibcoreOkHttpTestCases
Change-Id: Id30dc706725773db271666055234b2cd3e99232a
42 files changed
tree: 02acc9fac89c15bc760c9601c6a179c7038f02a7
  1. android/
  2. android-stub/
  3. apex/
  4. api/
  5. api-doclet/
  6. benchmark-android/
  7. benchmark-base/
  8. benchmark-graphs/
  9. benchmark-jmh/
  10. common/
  11. constants/
  12. gradle/
  13. libcore-stub/
  14. licenses/
  15. openjdk/
  16. openjdk-uber/
  17. platform/
  18. publicapi/
  19. release/
  20. repackaged/
  21. srcgen/
  22. test-support/
  23. testing/
  24. .clang-format
  25. .gitignore
  26. .lgtm.yml
  27. .travis.yml
  28. Android.bp
  29. build.gradle
  30. BUILDING.md
  31. CAPABILITIES.md
  32. CONTRIBUTING.md
  33. CPPLINT.cfg
  34. gradle.properties
  35. gradlew
  36. gradlew.bat
  37. IMPLEMENTATION_NOTES.md
  38. LICENSE
  39. METADATA
  40. MODULE_LICENSE_APACHE2
  41. NOTICE
  42. OWNERS
  43. PREUPLOAD.cfg
  44. README.android
  45. README.md
  46. settings.gradle
  47. test_logging.properties
README.md

Conscrypt - A Java Security Provider

Conscrypt is a Java Security Provider (JSP) that implements parts of the Java Cryptography Extension (JCE) and Java Secure Socket Extension (JSSE). It uses BoringSSL to provide cryptographic primitives and Transport Layer Security (TLS) for Java applications on Android and OpenJDK. See the capabilities documentation for detailed information on what is provided.

The core SSL engine has borrowed liberally from the Netty project and their work on netty-tcnative, giving Conscrypt similar performance.

Download

Conscrypt supports Java 7 or later on OpenJDK and Gingerbread (API Level 9) or later on Android. The build artifacts are available on Maven Central.

Download JARs

You can download the JARs directly from the Maven repositories.

OpenJDK (i.e. non-Android)

Native Classifiers

The OpenJDK artifacts are platform-dependent since each embeds a native library for a particular platform. We publish artifacts to Maven Central for the following platforms:

ClassifierOSArchitecture
linux-x86_64Linuxx86_64 (64-bit)
osx-x86_64Macx86_64 (64-bit)
windows-x86Windowsx86 (32-bit)
windows-x86_64Windowsx86_64 (64-bit)

Maven

Use the os-maven-plugin to add the dependency:

<build>
  <extensions>
    <extension>
      <groupId>kr.motd.maven</groupId>
      <artifactId>os-maven-plugin</artifactId>
      <version>1.4.1.Final</version>
    </extension>
  </extensions>
</build>

<dependency>
  <groupId>org.conscrypt</groupId>
  <artifactId>conscrypt-openjdk</artifactId>
  <version>2.5.1</version>
  <classifier>${os.detected.classifier}</classifier>
</dependency>

Gradle

Use the osdetector-gradle-plugin (which is a wrapper around the os-maven-plugin) to add the dependency:

buildscript {
  repositories {
    mavenCentral()
  }
  dependencies {
    classpath 'com.google.gradle:osdetector-gradle-plugin:1.4.0'
  }
}

// Use the osdetector-gradle-plugin
apply plugin: "com.google.osdetector"

dependencies {
  compile 'org.conscrypt:conscrypt-openjdk:2.5.1:' + osdetector.classifier
}

Uber JAR

For convenience, we also publish an Uber JAR to Maven Central that contains the shared libraries for all of the published platforms. While the overall size of the JAR is larger than depending on a platform-specific artifact, it greatly simplifies the task of dependency management for most platforms.

To depend on the uber jar, simply use the conscrypt-openjdk-uber artifacts.

Maven
<dependency>
  <groupId>org.conscrypt</groupId>
  <artifactId>conscrypt-openjdk-uber</artifactId>
  <version>2.5.1</version>
</dependency>
Gradle
dependencies {
  compile 'org.conscrypt:conscrypt-openjdk-uber:2.5.1'
}

Android

The Android AAR file contains native libraries for x86, x86_64, armeabi-v7a, and arm64-v8a.

Gradle

dependencies {
  implementation 'org.conscrypt:conscrypt-android:2.5.1'
}

How to Build

If you are making changes to Conscrypt, see the building instructions.