Skip to content

GitLab

Switch branch/tag
  1. 15 Sep, 2016 8 commits
  3. 14 Sep, 2016 2 commits
    • Kenny Root's avatar
      Fix typo in name of des-ede mapping · 3209baf3
      Kenny Root authored 
      This was mapping 2-key 3DES to regular DES thus resulting in all
encryption using 2-key 3DES having the wrong answers.

(cherry picked from commit 55caed99)

Bug: 31081987
Change-Id: I44ba12dcf51d57952cf3ba501381d144d271a2a6
      3209baf3
    • Kenny Root's avatar
      Fix typo in name of des-ede mapping · 0af37f8e
      Kenny Root authored 
      This was mapping 2-key 3DES to regular DES thus resulting in all
encryption using 2-key 3DES having the wrong answers.

(cherry picked from commit 55caed99)

Bug: 31081987
Change-Id: I44ba12dcf51d57952cf3ba501381d144d271a2a6
      0af37f8e
  5. 09 Sep, 2016 1 commit
    • Kenny Root's avatar
      Remove SSL_CTX_set_tmp_ecdh call · 2486fc8f
      Kenny Root authored 
      This now has the undesired effect of making a client only support this
curve for ECDHE. This used to be needed to allow a server to handshake
with ECDHE, but is now unnecessary for BoringSSL. The client doesn't
want this call and the server no longer needs this call, so delete it.

(cherry picked from commit 1ba6bcf1)

Test: mmma -j32 external/conscrypt && make -j32 build-art-host vogar && vogar --mode host --classpath out/host/common/obj/JAVA_LIBRARIES/core-tests-support-hostdex_intermediates/classes.jack --classpath out/host/common/obj/JAVA_LIBRARIES/core-tests-hostdex_intermediates/classes.jack libcore/luni/src/test/java/libcore/javax/net/ssl/SSLSocketTest.java
Bug: 31393711
Change-Id: Ib7afdcc3ea7ee3d2222a262f3c57abd065a4b4e1
      2486fc8f
  7. 30 Aug, 2016 1 commit
  9. 26 Aug, 2016 2 commits
  11. 16 Jun, 2016 1 commit
  13. 15 Jun, 2016 1 commit
    • Chad Brubaker's avatar
      Move CertBlacklist to conscrypt · ce5bdd03
      Chad Brubaker authored 
      CertBlacklist was previously in bouncycastle, but with the enso switch
we no longer use their CertPathValidator and so blacklist checking
wasn't being done.

CertBlacklist is mostly unchanged from bouncycastle except removing the
bouncycastle Digest and Hex dependencies in isPublicKeyBlackListed.

Bug: 29397721
Change-Id: Icccdcc0e108e8b0c60c47522114749518247a598
      ce5bdd03
  15. 23 May, 2016 14 commits
  17. 13 May, 2016 4 commits
  19. 02 May, 2016 2 commits
    • Kenny Root's avatar
      UniqueMutex for explicit ordering with ScopedSslBio · 885cd5fc
      Kenny Root authored 
      am: dd5e93cc

* commit 'dd5e93cc':
  UniqueMutex for explicit ordering with ScopedSslBio

Change-Id: Ibac52a957bebedf968ebd3ccbb0d3139c310ab5b
      885cd5fc
    • Kenny Root's avatar
      UniqueMutex for explicit ordering with ScopedSslBio · dd5e93cc
      Kenny Root authored 
      The MUTEX_LOCK / MUTEX_UNLOCK semantics work if you also explicitly
clear out resources that were supposed to be cleared before the lock is
released. However, with wrapper classes that do it automatically, you
can't get the correct ordering. Instead of converting these all to
manual acquire and release, convert the mutex handling to use automatic
release via UniqueMutex so that ordering is correct with resources that
should be protected by the mutex.

Thanks to Zhen Song for finding these issues.

(cherry picked from commit cdc9e2f0)

Bug: 28473706
Change-Id: I4b63ce674e0fc343fe156936df7e8f6e3130722f
      dd5e93cc
  21. 28 Mar, 2016 1 commit
    • Chad Brubaker's avatar
      Add getTrustedChainForServer · 8fa0aeec
      Chad Brubaker authored 
      This adds versions of the new checkServerTrusted methods that return the
built chain.

Bug: 27271561
Change-Id: Id03500dab962c949430ee217407bf64fec28adb7
      8fa0aeec
  23. 21 Mar, 2016 2 commits
  25. 18 Mar, 2016 1 commit