[DO NOT MERGE] Reject non-ASCII hostnames and SANs, Ignore DNS names in certificate CN. Removes the possibility of certificates spoofing DNS names by exploiting name collisions when lowercasing Unicode characters. Note that the relevant RFCs mandate that domain names in certificates should be stored using IDNA 2008 rules, i.e. as ASCII punycode. Ignoring DNS names in the certificate CN is a backport of a change made in Android P as this behaviour has been deprecated for many years. The P change was not gated on targetSdkVersion, so all apps on P or later ignore the CN field when verifiying hostnames, this change bring O MR1 into line with best practices without introducing significant fragmentation. The change makes hostname verification consistent across all releases with security patch support. Bug: 171980069 Test: cts-tradefed cts run -m CtsLibcoreTestCases Test: cts-tradefed cts run -m CtsLibcoreOkHttpTestCases Change-Id: I6be13c94b2db22229093d2f0403337798c3ad9ad Merged-In: I96d52609ce4966ff11f649ca940de3b02a43b0b2 (cherry picked from commit ef3cc00da34dcef024e39bcabcca098e49499b3e)
An HTTP & SPDY client for Android and Java applications. For more information see the website and the wiki.
Download the latest JAR or grab via Maven:
<dependency> <groupId>com.squareup.okhttp</groupId> <artifactId>okhttp</artifactId> <version>2.6.0</version> </dependency>
or Gradle:
compile 'com.squareup.okhttp:okhttp:2.6.0'
Snapshots of the development version are available in Sonatype's snapshots repository.
A library for testing HTTP, HTTPS, HTTP/2.0, and SPDY clients.
MockWebServer coupling with OkHttp is essential for proper testing of SPDY and HTTP/2.0 so that code can be shared.
Download the latest JAR or grab via Maven:
<dependency> <groupId>com.squareup.okhttp</groupId> <artifactId>mockwebserver</artifactId> <version>2.6.0</version> <scope>test</scope> </dependency>
or Gradle:
testCompile 'com.squareup.okhttp:mockwebserver:2.6.0'
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.