summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2013-11-15Merge branch 'bug/secure-random-vulnerability' into developSean Leonard
2013-11-15Add package declaration and attribution source to PRNGFixes.javaSean Leonard
2013-11-15Authenticated status remembered after exit.Parménides GV
If the user presses the back button and returns to leap_android, the app will show login or logout button remembering if s/he was authenticated or not. This fixes bug #3467.
2013-11-14Sometimes /dev/urandom is not writable.Parménides GV
Copied again from http://android-developers.blogspot.de/2013/08/some-securerandom-thoughts.html
2013-11-14Fixed SecureRandom PRNG problem.Parménides GV
Solution copied from http://android-developers.blogspot.de/2013/08/some-securerandom-thoughts.html
2013-11-13Fixed a typo in the rebase.Parménides GV
2013-11-13AlertDialog for failed downloads.Parménides GV
The dialog shows only an "OK" button to dismiss it, and the reason why the download failed. Right now, this dialog appears if a download is not successful. If it's too intrusive, I can remove some cases. Let's try how it feels.
2013-11-13Renamed certificate handling methods.Parménides GV
I still let one method to bypass hostname verifier, otherwise dev.bm will not work. I've reduced downloading functions to 3: download without CA, download with commercial CA and download with provider CA. I only download CA cert once, when the user selects the corresponding provider. Each time a user switch provider, the cert is downloaded (along with other json files).
2013-11-13Merge branch 'bug/vpn-reconnect-sometimes-hangs' into developSean Leonard
2013-11-09bitmaskclient instead of leapclient in package pathcyBerta
2013-11-09No new routes if openvpn is already running.Parménides GV
We cannot add routes to an existing openvpn session because it makes openvpn reconnect.
2013-11-07Logbuffer copied to Logcat.Parménides GV
2013-11-07Special debug log: "OpenVPN log" tagParménides GV
The log shows all state commands, and notifies when bytecount values have not changed more than 3 times in a row.
2013-11-05Command log to debug reconnects.Parménides GV
The content of this commit should be removed from the final fix.
2013-10-10Refactored leapclient to bitmaskclient.Parménides GV
I do not change the company (se.leap). All references within strings.xml point to "bitmask" instead of to "leap".
2013-10-04About button from CW does not show new provider.Parménides GV
2013-10-04ConfigurationWizard uses action instead of button.Parménides GV
New provider button has been converted to an action item, shown at the bottom of the screen.
2013-10-03Login dialog requires username.Parménides GV
I've also changed the way we notify that the password should have 8 characters at least, to make it consistent to the way we notify username is required.
2013-10-03Fixed M2 and M1 constants values.Parménides GV
Logging in, it was returning a "Bad response from server" due to the malinterpretation of the received JSON. It was looking for a field named "m2", but it was "M2".
2013-09-30Fixed typo in EIP.certificateParménides GV
2013-09-30Erroneous CA cert download correctly handled.Parménides GV
If there is an error while downloading CA cert on downloadJsonFiles, false is returned and progress dialog is dismissed.
2013-09-30Moved all constants from ConfigHelper.Parménides GV
They have been relocated to the corresponding classes.
2013-09-30Moved result constants to ProviderAPI.Parménides GV
2013-09-26Merge branch 'bug/inconsistent-cookie-management' into developSean Leonard
2013-09-26Replaced Apache HTTP client with HttpURLConnectionParménides GV
I do not manually manage cookies anymore, letting HttpURLConnection manage them via default CookieHandler (using CookiePolicy.ACCEPT_ORIGINAL_SERVER).
2013-09-26Apache HTTP to Android HttpsURLConnection started.Parménides GV
SRP parameter A tries to be sent via HttpsURLConnection. Right now, we have a problem with certificates because I'm not using provider CA cert to get the response. I'm going to merge the branch with better method names to download response using already existing code.
2013-09-26Commented all manual cookie management.Parménides GV
I send session_id cookie in the request for 1/cert, getting it from LeapHttpClient directly.
2013-09-25Removed cookie to logout chain.Parménides GV
2013-09-25Renamed certificate handling methods.Parménides GV
I still let one method to bypass hostname verifier, otherwise dev.bm will not work. I've reduced downloading functions to 3: download without CA, download with commercial CA and download with provider CA. I only download CA cert once, when the user selects the corresponding provider. Each time a user switch provider, the cert is downloaded (along with other json files).
2013-08-15Merge branch 'hotfix/danger_on-is-true-for-assets-provider' into developSean Leonard
2013-08-14Assets providers have danger_on "false".Parménides GV
2013-08-13Use java.security classes to validate string certificates and keys from providerSean Leonard
2013-08-13Merge branch 'bug/eip-fragment-is-not-showed-after-switching-provider' into ↵Sean Leonard
develop
2013-08-13Merge branch 'bug/provider-down-not-differentiated-from-certificate-error' ↵Sean Leonard
into develop
2013-08-13Merge branch 'feature/retry-login-retain-username' into developSean Leonard
2013-08-13Merge branch 'feature/providerApi-actions-instead-of-bundleExtras' into developSean Leonard
2013-08-03EIP fragment is replaced if provider is switched.Parménides GV
We were checking if eip existed before adding it again, but that check can be removed if we make a replace instead of an add.
2013-08-03FileNotFoundException catched in all downloads.Parménides GV
Added a new catch block in all downloads methods.
2013-08-01Merge branch 'bug/backstack-screwed-up-by-notification-tap' into developSean Leonard
2013-08-01ProviderAPI intent receives actions and parameters.Parménides GV
We no longer use BundleExtras named as the action ProviderAPI is intended to perform, but we standardise this name (ProviderAPI.PARAMETERS), and use setAction to pass that action string.
2013-07-30Retains username if login process failed.Parménides GV
New login dialog shows the original username, so that if the user failed writing his/her password, s/he does not have to write again the username.
2013-07-29Backstack OK from notification bar.Parménides GV
Pressing back after entering Dashboard from notification bar, the user goes back to home.
2013-07-29LeapHttpClient verifies hostname.Parménides GV
This fixes #3287
2013-07-26Include GPLv3+ file and header for files in se.leap.leapclient packageSean Leonard
2013-07-26Include ics-openvpn license file in se.leap.openvpn packageSean Leonard
Clean erroneous copyright text (Consulted Arne) ics-openvpn uses GPLv2+
2013-07-25Login progressdialog get dismissed when finished.Parménides GV
If login is successful, dialog is dismissed and toast is showed. If login is not successful and the user cancels the new login dialog presented to him/her, then Dashboard is showed.
2013-07-20If IOException, use current provider CA cert.Parménides GV
If the CA cert was correctly downloaded, we assume it can be used to validate the string download. If CA cert cannot validate that connection, then if the trust completely checkbox was checked it will try with the other methods. If it was not checked, a certificate error is shown (telling the user the provider is not trusted).
2013-07-20Certificate message shown when appropiate.Parménides GV
Only if all downloading methods fail and the last one throws an IOException, the certificate error message toast is shown.
2013-07-20Erroneous untrusted provider toast with LEAP fixedParménides GV
I've also rearranged how we handle SSL errors. In first place, if the user checked the "Trust completely" checkbox, leap_android tries to use the CA cert pointed out by provider.json. If that does not succeed, it uses an always-returning-true hostname verifier (this was previously done before using CA cert).
2013-07-19Fix config error dialog missing call to show()Sean Leonard
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-08 21:52:45 +0000