| 6b1eb9b22af554c7cf858b75ec25c9e26d25c6cd |
|
08-Sep-2011 |
Brian Carlstrom <bdc@google.com> |
resolved conflicts for merge of e903eaf4 to master
Change-Id: I5e37b50e0f6ed6cd61fa1310c15799442d702b61
|
| 4023e4c4a1bca1fa4df1e9dc3cbc19ee2a723485 |
|
03-Sep-2011 |
Brian Carlstrom <bdc@google.com> |
Blacklist two additional DigiNotar intermediate CAs
Based on Chrome CL:
http://src.chromium.org/viewvc/chrome?view=rev&revision=99534
Bug: 5232736
(cherry picked from commit 90b14303be21b89007bd155efab7d880ee6814c9)
Change-Id: Ia18e0aa54378285327d33f3ce5ff4678712c80c3
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/PKIXCertPathValidatorSpi.java
|
| 6fe522ad2daa8168fe9345f32f7bfc677fa86fd2 |
|
01-Sep-2011 |
Brian Carlstrom <bdc@google.com> |
resolved conflicts for merge of fd163e51 to master
Change-Id: I14f5d5b1f75c876dec7c74d8682a738e62d4352b
|
| 541e309823a8c4f7746c05cc670e192166217a3a |
|
31-Aug-2011 |
Brian Carlstrom <bdc@google.com> |
Add Chrome-style public key blacklist to CertPathValidator
Based on Chrome's CLs to blacklist the DigiNotar Root CA.
http://src.chromium.org/viewvc/chrome?view=rev&revision=98750
Bug: 5232736
(cherry picked from commit b44f0edcf5164b260a2c11207928984f2d84c079)
Change-Id: I15454c9ed676b59d8d001b0a18d68fb69e41d828
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/PKIXCertPathValidatorSpi.java
|
| c4fa740cf84a54fceb87964ca8ea666fd41b5b8f |
|
20-May-2011 |
Brian Carlstrom <bdc@google.com> |
Remove IndexedPKIXParameters
Change-Id: If906010b9c5b9f5da803885b316fa7b9e4a7db0f
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/PKIXCertPathValidatorSpi.java
|
| 34c261b1a00029744cfb7de1a69dca4b3ffb51a1 |
|
24-Mar-2011 |
Brian Carlstrom <bdc@google.com> |
Add Chrome-style certificate blacklist to CertPathValidator
Based on Chrome's CLs to blacklist the malformed certificates from
Comodo's recent fraud incident.
http://src.chromium.org/viewvc/chrome?view=rev&revision=78478
http://src.chromium.org/viewvc/chrome?view=rev&revision=78748
http://src.chromium.org/viewvc/chrome?view=rev&revision=78869
Bug: 4165439
Change-Id: I51c79f1cb425b887d4fd11c5a33e230fee795668
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/PKIXCertPathValidatorSpi.java
|
| 60f1dce097d78928597a5d057577596162e825fd |
|
02-Nov-2010 |
Brian Carlstrom <bdc@google.com> |
CertPathValidator changes tracking libcore TrustManager improvements
Revert checks for TrustAnchors in the cert chain, which is not part of
PKIX behavior. This is now done as part of cleaning in the cert chain
in libcore's TrustManagerImpl.
patches/README
src/main/java/org/bouncycastle/jce/provider/CertPathValidatorUtilities.java
src/main/java/org/bouncycastle/jce/provider/PKIXCertPathValidatorSpi.java
src/main/java/org/bouncycastle/jce/provider/RFC3280CertPathUtilities.java
Preserve IndexedPKIXParameters in local to keep our O(1) indexed
lookup of TrustAnchors by X500Principal, instead of falling back to
O(n) lookup in the common case.
src/main/java/org/bouncycastle/jce/provider/PKIXCertPathValidatorSpi.java
Updated patch
patches/android.patch
Bug: 2530852
Change-Id: Iecb671797496c3bc6a4e1a22c848b28af4bc756e
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/PKIXCertPathValidatorSpi.java
|
| c37f4a04ef89e73a39a59f3c5a179af8c8ab5974 |
|
21-Jun-2010 |
Brian Carlstrom <bdc@google.com> |
Upgrade bouncycastle from 1.34 to 1.45
This maintains the same set of provided algorithms as tested with
libcore's javax.security.PreparerTest. A further checkin will try to
bring the supported list in line with the RI.
Details:
Upgraded to JDK 1.6 version of 1.45 release
bouncycastle.version
First pass of triming unneeded files
bouncycastle.config
Compile with UTF-8 to avoid warnings
Android.mk
The updated patch
patches/android.patch
The rest of the files are generated from the release tar ball and the patch
./import_bouncycastle.sh import .../bcprov-jdk16-145.tar.gz
src/main/java/...
Change-Id: I1df5ad8a7161ec578415ae23f01c3b550e381927
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/PKIXCertPathValidatorSpi.java
|
| b61a96e7ef1a78acf013bbf08fe537e5b5f129ca |
|
26-Apr-2010 |
Peter Hallam <peterhal@google.com> |
merge more modules into luni
/external/bouncycastle/src/main/java/org/bouncycastle/jce/provider/PKIXCertPathValidatorSpi.java
|