Skip to content


Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?

Latest commit

* Rework Ssl*Stream creation.

PR #1106 introduced a subtle bug by changing Ssl*Stream
creation to use the public get*Stream() methods.

The contract for those methods is to throw if the socket has been
closed, which mean two threads could race such that
startHandshake() called getInputStream() after the socket has
been closed by another (e.g. timeout) thread.  The upshot was
that getInputStream() would throw, causing close() to be called
before an output stream is created, causing an NPE when trying to
send a TLS close message.

This change moves the actual creation into a method which doesn't
chack the socket state and so is suitable for calling from

Also added some additional tests around shutdownInput() and
shutdownOutput() as it became apparent these were missing.

Git stats


Failed to load latest commit information.
Latest commit message
Commit time
November 6, 2019 14:54
January 21, 2021 13:30
September 10, 2020 10:55
January 6, 2017 12:21
September 10, 2020 10:55
December 12, 2016 12:30
January 6, 2017 12:21
January 21, 2021 13:30
January 21, 2021 13:30
November 6, 2019 14:54

Conscrypt - A Java Security Provider

Conscrypt is a Java Security Provider (JSP) that implements parts of the Java Cryptography Extension (JCE) and Java Secure Socket Extension (JSSE). It uses BoringSSL to provide cryptographic primitives and Transport Layer Security (TLS) for Java applications on Android and OpenJDK. See the capabilities documentation for detailed information on what is provided.

The core SSL engine has borrowed liberally from the Netty project and their work on netty-tcnative, giving Conscrypt similar performance.

Mailing List:


Conscrypt supports Java 7 or later on OpenJDK and Gingerbread (API Level 9) or later on Android. The build artifacts are available on Maven Central.

Download JARs

You can download the JARs directly from the Maven repositories.

OpenJDK (i.e. non-Android)

Native Classifiers

The OpenJDK artifacts are platform-dependent since each embeds a native library for a particular platform. We publish artifacts to Maven Central for the following platforms:

Classifier OS Architecture
linux-x86_64 Linux x86_64 (64-bit)
osx-x86_64 Mac x86_64 (64-bit)
windows-x86 Windows x86 (32-bit)
windows-x86_64 Windows x86_64 (64-bit)


Use the os-maven-plugin to add the dependency:




Use the osdetector-gradle-plugin (which is a wrapper around the os-maven-plugin) to add the dependency:

buildscript {
  repositories {
  dependencies {
    classpath ''

// Use the osdetector-gradle-plugin
apply plugin: ""

dependencies {
  compile 'org.conscrypt:conscrypt-openjdk:2.5.2:' + osdetector.classifier

Uber JAR

For convenience, we also publish an Uber JAR to Maven Central that contains the shared libraries for all of the published platforms. While the overall size of the JAR is larger than depending on a platform-specific artifact, it greatly simplifies the task of dependency management for most platforms.

To depend on the uber jar, simply use the conscrypt-openjdk-uber artifacts.

dependencies {
  compile 'org.conscrypt:conscrypt-openjdk-uber:2.5.2'


The Android AAR file contains native libraries for x86, x86_64, armeabi-v7a, and arm64-v8a.


dependencies {
  implementation 'org.conscrypt:conscrypt-android:2.5.2'

How to Build

If you are making changes to Conscrypt, see the building instructions.


Conscrypt is a Java Security Provider that implements parts of the Java Cryptography Extension and Java Secure Socket Extension.



Code of conduct

Security policy





No packages published