-
Notifications
You must be signed in to change notification settings - Fork 9.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Drop code for Android 2.3 through 4.4. #4508
Conversation
No more Gingerbread, Honeycomb, Ice Cream Sandwich, Jelly Bean or KitKat.
Nice to see the new years PRs are back! |
public BasicCertificateChainCleaner(TrustRootIndex trustRootIndex) { | ||
this.trustRootIndex = trustRootIndex; | ||
public BasicCertificateChainCleaner(X509Certificate... caCerts) { | ||
subjectToCaCerts = new LinkedHashMap<>(); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Promoted from BasicTrustRootIndex.
@@ -112,13 +128,31 @@ private boolean verifySignature(X509Certificate toVerify, X509Certificate signin | |||
} | |||
} | |||
|
|||
/** Returns the trusted CA certificate that signed {@code cert}. */ | |||
private X509Certificate findByIssuerAndSignature(X509Certificate cert) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Same!
When you update http://square.github.io/okhttp/ with requirements, can you call out the ongoing support for critical security updates for 3.12.X? But that it won't be generally active. It would be good to be able to point people to our documented policy (whatever specifically that is). |
@@ -50,8 +46,6 @@ | |||
private final Class<?> sslParametersClass; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
"Android 2.3 or better" above
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Snuck in a fix here: #4511
Maybe worth logging a warning when this code runs on older platforms as guidance when a developer runs on a legacy device. Is that easy to do? |
No more Gingerbread, Honeycomb, Ice Cream Sandwich, Jelly Bean or KitKat.