Reject non-ASCII hostnames and SANs.

Removes the possibility of certificates spoofing DNS names by
exploiting name collisions when lowercasing Unicode characters.
Note that the relevant RFCs mandate that domain names in
certificates should be stored using IDNA 2008 rules, i.e. as
ASCII punycode.

Bug: 171980069
Test: atest CtsLibcoreTestCases CtsLibcoreOkHttpTestCases
Change-Id: I96d52609ce4966ff11f649ca940de3b02a43b0b2
(cherry picked from commit 72ac99d371b9794bd4947ae2794e3ef322e36673)
3 files changed
tree: 2ad7b0e2387008893154a5e24071debcf5864131
  1. .buildscript/
  2. .gitignore
  3. .travis.yml
  4. Android.bp
  5. BUG-BOUNTY.md
  6. CHANGELOG.md
  7. CONTRIBUTING.md
  8. LICENSE.txt
  9. MODULE_LICENSE_APACHE2
  10. OWNERS
  11. PREUPLOAD.cfg
  12. README.android
  13. README.md
  14. android/
  15. benchmarks/
  16. checkstyle.xml
  17. deploy_website.sh
  18. mockwebserver/
  19. okcurl/
  20. okhttp-android-support/
  21. okhttp-apache/
  22. okhttp-hpacktests/
  23. okhttp-logging-interceptor/
  24. okhttp-testing-support/
  25. okhttp-tests/
  26. okhttp-urlconnection/
  27. okhttp-ws-tests/
  28. okhttp-ws/
  29. okhttp/
  30. okio/
  31. pom.xml
  32. repackaged/
  33. samples/
  34. srcgen/
  35. website/
README.md

OkHttp

An HTTP & SPDY client for Android and Java applications. For more information see the website and the wiki.

Download

Download the latest JAR or grab via Maven:

<dependency>
  <groupId>com.squareup.okhttp</groupId>
  <artifactId>okhttp</artifactId>
  <version>2.6.0</version>
</dependency>

or Gradle:

compile 'com.squareup.okhttp:okhttp:2.6.0'

Snapshots of the development version are available in Sonatype's snapshots repository.

MockWebServer

A library for testing HTTP, HTTPS, HTTP/2.0, and SPDY clients.

MockWebServer coupling with OkHttp is essential for proper testing of SPDY and HTTP/2.0 so that code can be shared.

Download

Download the latest JAR or grab via Maven:

<dependency>
  <groupId>com.squareup.okhttp</groupId>
  <artifactId>mockwebserver</artifactId>
  <version>2.6.0</version>
  <scope>test</scope>
</dependency>

or Gradle:

testCompile 'com.squareup.okhttp:mockwebserver:2.6.0'

License

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

   http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.