aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-12-24Snap for 4517567 from cbcd27119edc01ce3009d6a90d47abf2d486b61d to pi-releaseandroid-p-preview-1p-preview-1android-build-team Robot
Change-Id: I51ef6060b607e7f36cda817250abd3ef3624b71f
2017-12-22Fix several issues with tls-boringssl.c. am: 9d428efdba am: cf68884f8dDavid Benjamin
am: 7b2984872c Change-Id: I22b9309820d6c58afedd563332bb705812bbd63e
2017-12-22Fix several issues with tls-boringssl.c. am: 9d428efdbaDavid Benjamin
am: cf68884f8d Change-Id: Ife2724dc966ce135f312150bde44970a01f29cf6
2017-12-22Fix several issues with tls-boringssl.c.David Benjamin
am: 9d428efdba Change-Id: I0e02b1bb97277c6970cc19694f6610f7fdf421f3
2017-12-21Fix several issues with tls-boringssl.c.android-wear-p-preview-2android-wear-8.0.0_r1android-o-mr1-iot-release-1.0.2android-o-mr1-iot-release-1.0.1android-o-mr1-iot-release-1.0.0android-o-mr1-iot-preview-8android-o-mr1-iot-preview-7o-mr1-iot-preview-8o-mr1-iot-preview-7David Benjamin
An earlier CL added IPPS support via BoringSSL, but the change had many issues. This fixes the following: - random() with srandom(time(NULL)) is not an acceptable source of entropy for a cryptographic library. Fortunately, BoringSSL ignores calls to RAND_seed anyway, so delete it all. - ERR_error_string(NULL) is not thread-safe. (We've really got to get rid of that function, but there are a lot of callers to clear through.) Use ERR_error_string_n with a local buffer. - Using the version-specific APIs disables TLS 1.2. Instead, use TLS_method (client and server distinctions on methods are ignored in BoringSSL), and configure the minimum protocol version accordingly. - SSL 3.0 is gone. Ignore _HTTP_TLS_ALLOW_SSL3 altogether. The old code called SSLv3_*_method() which always fail in BoringSSL and, were they not to fail, would have disabled all secure versions of TLS! - The SSL_set_tlsext_host_name call was guarded by a HAVE_SSL_SET_TLSEXT_HOST_NAME, but config.h was not updated. Remove the guard. - Server support was not added, so make the operation actually fail. Remove the commented out code (which wouldn't work as calling SSL_CTX_* functions after SSL_new doesn't do anything). - The code to call SSL_connect vs SSL_accept had a typo and only called SSL_accept. In case someone wants server support in the future, use the generic SSL_do_handshake which is equivalent, provided the caller uses SSL_set_{connect,accept}_state. This also cleans a couple things up: - SSL_load_error_strings is a no-op in BoringSSL. SSL_library_init is also a no-op on Android, but there do exist configuations where it is not, so I've left it in. - SSL_write returns int, not ssize_t. The casts are unnecessary. - Extracting the SSL_CTX from the SSL to free it is weird. One can just free it earlier. The SSL owns a reference to the SSL_CTX and will do the rest for you. - Delete some unused functions whose comments even still say "gnutls" on them. IMPORTANT: This does NOT fix the following: - This file does not verify peer certificates at all. This means any network attacker could use a different certificate and break the connection anyway. I do not know how printer certificates are typically checked or how Android's trust store is set up, so someone with more domain knowledge may need to help out here. (Are printer certs typically checked at all? [0] suggests yes, amazingly.) [0] https://support.microsoft.com/en-us/help/2021626/when-attempting-to-add-an-ipp-printer-over-https--you-receive-an-error Test: mma. Additionally tested by Mopria folks. See review comments. Change-Id: Ife007038290ff79f3413179a26c0d40c1bb2c85b
2017-10-10Snap for 4386413 from 762b7b666bd1fffe6571b0d1c67d72bdf8d0d456 to pi-releaseandroid-build-team Robot
Change-Id: I6e9b8211b8164ced85221384b049d3ecd2337817
2017-10-09More agressive compiler warnings checker. am: 4518e60237 am: 1d9caee49b am: ↵Philip P. Moltmann
a6d0e472a6 am: 6ac867026a Change-Id: I5bf84c83c94f14029c5ef6698fb4549f62d0c247
2017-10-09More agressive compiler warnings checker. am: 4518e60237 am: 1d9caee49bPhilip P. Moltmann
am: a6d0e472a6 Change-Id: Idd89de3c241fbbc72657d81fedceb9ac80677069
2017-10-09More agressive compiler warnings checker. am: 4518e60237Philip P. Moltmann
am: 1d9caee49b Change-Id: I41022950fa848497bcbcf7b4af96996dd3660dc0
2017-10-09More agressive compiler warnings checker.android-o-mr1-iot-preview-6o-mr1-iot-preview-6Philip P. Moltmann
am: 4518e60237 Change-Id: I6fce3063d5cf508081408f66fb3d74d332cda43f
2017-10-09More agressive compiler warnings checker.Philip P. Moltmann
Test: Compiled Change-Id: Icb458772079b0a6743d833a7b6fd8ec3ff5e2ccd
2017-10-09Use -Werror in external/libcups am: 1fa15a0053 am: 2b3d0e2ea5 am: 03df29cceeChih-Hung Hsieh
am: 66793744a8 Change-Id: I8322b341e2237d87a6c7b04a781fa8925cd85064
2017-10-09Use -Werror in external/libcups am: 1fa15a0053 am: 2b3d0e2ea5Chih-Hung Hsieh
am: 03df29ccee Change-Id: I8a86e641444797be4868e56ea48d68fcbb638447
2017-10-09Use -Werror in external/libcups am: 1fa15a0053Chih-Hung Hsieh
am: 2b3d0e2ea5 Change-Id: I52714a4883ca8106289d79322efa3ef5ea01eb9d
2017-10-09Use -Werror in external/libcupsChih-Hung Hsieh
am: 1fa15a0053 Change-Id: I1411e9d2b984e6c6b2370acaf8c6548fccdcedd1
2017-10-06Use -Werror in external/libcupsChih-Hung Hsieh
* Do not use -Wno-error. Bug: 66996870 Test: build with WITH_TIDY=1 Change-Id: Idf13d21003934b5c7e5ff28a1ec0e5e8e55451b3
2017-10-06Snap for 4380820 from 7504bad83253b23059a1ee58036fdb3f12522a05 to pi-releaseandroid-build-team Robot
Change-Id: Idb4bb8d48794d7c258e2fb10e7c5a934ae9c3246
2017-10-06Add IPPS support via BoringSSL am: 9eafdc6d27Glade Diviney
am: f0373b344e Change-Id: I5e582ed7e4ed4e71260846290be270116fd881cf
2017-10-06Add IPPS support via BoringSSLGlade Diviney
am: 9eafdc6d27 Change-Id: I1f8d56df1e38212e523bc4f231f822d960bb76a4
2017-10-05Add IPPS support via BoringSSLoreo-mr1-devGlade Diviney
Fixes: 67460226 Test: Use Default Print Service with an IPPS-only printer Change-Id: I5794906ddf176d62c9727c98417efa2c1ceba7ff Signed-off-by: Glade Diviney <mopriadevteam@gmail.com>
2017-10-05Add IPPS support via BoringSSL am: 65a175f66f am: 168da1cd37 am: 15d6e41cf2Glade Diviney
am: 011527a13a Change-Id: I35e82470cc2c5119d83baabedc34231870d555fd
2017-10-05Add IPPS support via BoringSSL am: 65a175f66f am: 168da1cd37Glade Diviney
am: 15d6e41cf2 Change-Id: I44b8767a96b8b3550ff657cfe79dc59768cb3307
2017-10-05Add IPPS support via BoringSSL am: 65a175f66fGlade Diviney
am: 168da1cd37 Change-Id: Ice4e69087782aa515e974411677a7fecdd9d351c
2017-10-05Add IPPS support via BoringSSLGlade Diviney
am: 65a175f66f Change-Id: I1f88c174a4c8255e2a86f525738b442afd0975ff
2017-10-05Add IPPS support via BoringSSLGlade Diviney
Test: Use Default Print Service with an IPPS-only printer Change-Id: I5794906ddf176d62c9727c98417efa2c1ceba7ff Signed-off-by: Glade Diviney <mopriadevteam@gmail.com>
2017-05-12Update libcups to v2.2.3 am: 1fa6c24757 -s oursoreo-dr1-devPhilip P. Moltmann
am: 8eacdf6145 Change-Id: I81fc4b74f8337761bcb5ceaa9831b778ba59dd3a
2017-05-12Store version in file, not a git tag. am: f03fe600ea -s oursPhilip P. Moltmann
am: cae10aa570 Change-Id: I73ccefe659bccdbcc05acf11049c2b409dada182
2017-05-12Update libcups to v2.2.3 am: 2447373f18 am: 8c6e1893e8 am: 1f409d5f8ePhilip P. Moltmann
am: 757e3477ff Change-Id: I85410e76327f0ee886a756a968ad29d5fc613311
2017-05-12Store version in file, not a git tag. am: e78fa6dfe2 am: 0c904dcfc0 am: ↵Philip P. Moltmann
4faf284244 am: 713d904c3b Change-Id: Ifed6dcfab397fbdaff6f91ac80272882adccd683
2017-05-12Update libcups to v2.2.3Philip P. Moltmann
am: 1fa6c24757 -s ours Change-Id: I859d34fe034cb4b34d34bbd32c456a5ba639fd85
2017-05-12Store version in file, not a git tag.Philip P. Moltmann
am: f03fe600ea -s ours Change-Id: I8758e8bb95f1f3e2586de70433fccacd4b8d37b0
2017-05-12Update libcups to v2.2.3 am: 2447373f18 am: 8c6e1893e8Philip P. Moltmann
am: 1f409d5f8e Change-Id: Ibaa7713759ad20abde7bb44e162bf46025d07e15
2017-05-12Store version in file, not a git tag. am: e78fa6dfe2 am: 0c904dcfc0Philip P. Moltmann
am: 4faf284244 Change-Id: I59604abf990739b648d2aca4ca1f33db22412302
2017-05-11Update libcups to v2.2.3 am: 2447373f18Philip P. Moltmann
am: 8c6e1893e8 Change-Id: I50decb70398b6b843df475212a3c741fa8452e53
2017-05-11Store version in file, not a git tag. am: e78fa6dfe2Philip P. Moltmann
am: 0c904dcfc0 Change-Id: I8fe0c79267a9a4cf430f461d2e929b46e969084d
2017-05-11Update libcups to v2.2.3Philip P. Moltmann
am: 2447373f18 Change-Id: I67e0d69ea4524f7a172bcbfc8e6f97a50c407211
2017-05-11Store version in file, not a git tag.Philip P. Moltmann
am: e78fa6dfe2 Change-Id: If3556ce2e553bbdcb12a354e11b4195251dd071a
2017-05-11Update libcups to v2.2.3android-vts-8.0_r2android-vts-8.0_r1oreo-devPhilip P. Moltmann
Bug: 38203442 Test: built Change-Id: I8f363c71c291363514100690ca7f8c463d98eb78 Merged-In: I8f363c71c291363514100690ca7f8c463d98eb78
2017-05-11Store version in file, not a git tag.Philip P. Moltmann
Bug: 38203442 Test: update_libcups Change-Id: I4432c0e42db5c6e243ff40cc5ab7502c5e5e7f88 Merged-In: I4432c0e42db5c6e243ff40cc5ab7502c5e5e7f88
2017-05-11Update libcups to v2.2.3android-o-iot-preview-5o-iot-preview-5Philip P. Moltmann
Bug: 38203442 Test: built Change-Id: I8f363c71c291363514100690ca7f8c463d98eb78
2017-05-11Store version in file, not a git tag.Philip P. Moltmann
Bug: 38203442 Test: update_libcups Change-Id: I4432c0e42db5c6e243ff40cc5ab7502c5e5e7f88
2017-05-10Convert Android.mk->Android.bp am: 475aad7be8 am: bbf4f35ea3 am: 9979077883Jayant Chowdhary
am: 7a07142552 Change-Id: I4c89fdcea0c63fb0830592478e518cbba95ff6d0
2017-05-10Convert Android.mk->Android.bp am: 475aad7be8 am: bbf4f35ea3Jayant Chowdhary
am: 9979077883 Change-Id: I3e61fc6d3894bcbf7e6d071924a2cff4ec387b52
2017-05-10Convert Android.mk->Android.bp am: 475aad7be8Jayant Chowdhary
am: bbf4f35ea3 Change-Id: Ic0713c2e60e2dc1e10b12f7349633a484c07f380
2017-05-10Convert Android.mk->Android.bpJayant Chowdhary
am: 475aad7be8 Change-Id: I32a2c8702438554c516c8c42c8d898f70f04789e
2017-05-09Convert Android.mk->Android.bpJayant Chowdhary
Test: mm -j64 Change-Id: I1a6c5f04aa39754ddcac558dfe185f37d1ae0efc
2017-03-01Add license files for libcups am: 31c7472621 am: a7a53b313fandroid-wear-o-preview-4android-wear-o-preview-3android-o-preview-2o-preview-2Philip P. Moltmann
am: 94455991af Change-Id: I61275dc63ec4080ef76e7a58989483afaa05994e
2017-03-01Libcups should built against ndk am: 351273cf28 am: 1e26deb80fPhilip P. Moltmann
am: 85d2583616 Change-Id: I6b597e236062cd7ca1b1ace2a152804aec686b5e
2017-03-01Add license files for libcups am: 31c7472621Philip P. Moltmann
am: a7a53b313f Change-Id: I10f4c91fe8cec4690dc51cbbfb198b288be96ddb
2017-03-01Libcups should built against ndk am: 351273cf28Philip P. Moltmann
am: 1e26deb80f Change-Id: I43d413388b466a9cfd1a25a77cca5829b2e9fb4a