<feed xmlns='http://www.w3.org/2005/Atom'>
<title>bitmask_android.git/app/src/insecure, branch 0.9.7RC1</title>
<subtitle>[bitmask_android] 
</subtitle>
<link rel='alternate' type='text/html' href='https://leap.se/git/bitmask_android.git/'/>
<entry>
<title>#8757 new ProviderApiBase includes commonly used code between different implementations of ProviderAPI</title>
<updated>2017-10-31T14:58:07+00:00</updated>
<author>
<name>cyBerta</name>
<email>cyberta@riseup.net</email>
</author>
<published>2017-10-31T14:58:07+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/bitmask_android.git/commit/?id=8158397299dc29e6ffa1018b082c41aad37f18d6'/>
<id>8158397299dc29e6ffa1018b082c41aad37f18d6</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>add missing import...</title>
<updated>2017-10-29T17:18:38+00:00</updated>
<author>
<name>cyBerta</name>
<email>cyberta@riseup.net</email>
</author>
<published>2017-10-29T17:18:38+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/bitmask_android.git/commit/?id=1f133c139e4f9f26a265b26cbb6f37c2556a5fcc'/>
<id>1f133c139e4f9f26a265b26cbb6f37c2556a5fcc</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>#8757 refactores ProviderAPI for production flavor</title>
<updated>2017-10-29T16:08:02+00:00</updated>
<author>
<name>cyBerta</name>
<email>cyberta@riseup.net</email>
</author>
<published>2017-10-29T16:08:02+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/bitmask_android.git/commit/?id=dc0a4511dfd54135aeb1e87dac55ed5644e5ae6b'/>
<id>dc0a4511dfd54135aeb1e87dac55ed5644e5ae6b</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>#8757 refactores ProviderAPI for insecure flavor, fixes tests, renames confusing constants, updates robotium</title>
<updated>2017-10-28T18:41:05+00:00</updated>
<author>
<name>cyBerta</name>
<email>cyberta@riseup.net</email>
</author>
<published>2017-10-28T18:41:05+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/bitmask_android.git/commit/?id=68bc106ee872b13830dfa5fa9794f7cecb306d8e'/>
<id>68bc106ee872b13830dfa5fa9794f7cecb306d8e</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>8757 fixes session cookie handling by implementing okHttpClient and custom cookiejar, enables TLS 1.2 on old devices, restricts allowed cipher suites on new devices in order to harden tls based communication</title>
<updated>2017-10-25T13:55:49+00:00</updated>
<author>
<name>cyBerta</name>
<email>cyberta@riseup.net</email>
</author>
<published>2017-10-25T13:55:49+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/bitmask_android.git/commit/?id=c37149dec7dbc2ff2bccfa643792080c3c86ce18'/>
<id>c37149dec7dbc2ff2bccfa643792080c3c86ce18</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>update ics-openvpn: update classes, manifest, resources and build script</title>
<updated>2017-09-20T23:28:24+00:00</updated>
<author>
<name>cyBerta</name>
<email>cyberta@riseup.net</email>
</author>
<published>2017-09-20T23:28:24+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/bitmask_android.git/commit/?id=d77b9aefea75491b50f28a6880906ba9496979f2'/>
<id>d77b9aefea75491b50f28a6880906ba9496979f2</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Update build tools and compile sdk version.</title>
<updated>2016-02-06T11:42:42+00:00</updated>
<author>
<name>Parménides GV</name>
<email>parmegv@sdf.org</email>
</author>
<published>2016-02-06T11:42:42+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/bitmask_android.git/commit/?id=096faf08f2d0cc4dc4a28677415391942410063d'/>
<id>096faf08f2d0cc4dc4a28677415391942410063d</id>
<content type='text'>
Warn about the needed libraries for 64 bit systems.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Warn about the needed libraries for 64 bit systems.
</pre>
</div>
</content>
</entry>
<entry>
<title>s/buildtype/flavor, changed riseup's pin</title>
<updated>2015-06-08T18:04:03+00:00</updated>
<author>
<name>Parménides GV</name>
<email>parmegv@sdf.org</email>
</author>
<published>2015-06-08T17:56:43+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/bitmask_android.git/commit/?id=b0a0805ab81aaa4e204ecfc77d3a6a7f7ed66b2f'/>
<id>b0a0805ab81aaa4e204ecfc77d3a6a7f7ed66b2f</id>
<content type='text'>
Riseup's EE certificate expired (EE = End-Entity, the commercial
certificate signed by the issuer), and we weren't able to fetch
provider.json because the pin wasn't valid.

This problem needs to be avoided in the future, using
HKPK (https://tools.ietf.org/html/rfc7469), which Micah's implementing
on Riseup.

Switching from build types from flavors enables us to run tests against
production apk, not just debug. I didn't detect this pinning problem
because tests were run only against the debug apk, which trusted
preseeded providers by default (thus bypassing pinning issue).
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Riseup's EE certificate expired (EE = End-Entity, the commercial
certificate signed by the issuer), and we weren't able to fetch
provider.json because the pin wasn't valid.

This problem needs to be avoided in the future, using
HKPK (https://tools.ietf.org/html/rfc7469), which Micah's implementing
on Riseup.

Switching from build types from flavors enables us to run tests against
production apk, not just debug. I didn't detect this pinning problem
because tests were run only against the debug apk, which trusted
preseeded providers by default (thus bypassing pinning issue).
</pre>
</div>
</content>
</entry>
</feed>
