Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-10-28 | #8757 refactores ProviderAPI for insecure flavor, fixes tests, renames ↵ | cyBerta | |
confusing constants, updates robotium | |||
2017-10-25 | 8757 fixes session cookie handling by implementing okHttpClient and custom ↵ | cyBerta | |
cookiejar, enables TLS 1.2 on old devices, restricts allowed cipher suites on new devices in order to harden tls based communication | |||
2017-09-21 | update ics-openvpn: update classes, manifest, resources and build script | cyBerta | |
2016-02-06 | Update build tools and compile sdk version. | Parménides GV | |
Warn about the needed libraries for 64 bit systems. | |||
2015-06-08 | s/buildtype/flavor, changed riseup's pin | Parménides GV | |
Riseup's EE certificate expired (EE = End-Entity, the commercial certificate signed by the issuer), and we weren't able to fetch provider.json because the pin wasn't valid. This problem needs to be avoided in the future, using HKPK (https://tools.ietf.org/html/rfc7469), which Micah's implementing on Riseup. Switching from build types from flavors enables us to run tests against production apk, not just debug. I didn't detect this pinning problem because tests were run only against the debug apk, which trusted preseeded providers by default (thus bypassing pinning issue). |