Skip to content

v2.9.0

Latest
Latest

Choose a tag to compare

View all tags
@inorick inorick released this 04 Nov 15:40
· 2 commits to master since this release
2.9.0
810e016
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Conscrypt Version 2.9.0.

This is a new release of conscrypt-openjdk, conscrypt-openjdk-uber and conscrypt-android on maven.

It includes the following changes:

  • Update the built-in SPKI certificate blocklist from Chromium and enable it by default on OpenJDK and unbundled Android to block the compromised eMudhra intermediate CA certificates (#1554).
  • Expose the negotiated TLS group/curve name via Conscrypt.getGroupName(SSLSocket) and Conscrypt.getGroupName(SSLEngine) (#1552).
  • Return a defensive copy from OpenSSLCipher.engineGetIV() and allow getParameters() in cipher and RSA-PSS implementations to work without installing Conscrypt globally.
  • Bug fixes, error handling improvements, and cleanups.
Assets 2
Loading