{"push_id":541040932,"size":4,"distinct_size":4,"ref":"refs/heads/1.4","head":"148cd7b91c53fbb56ad93c918b7d331754dd3883","before":"2ba6f2d92b2061766248a124358bd22704a806c3","commits":[{"sha":"a6c6923ddbb69f43380190f88d5a36c13e1f8f40","author":{"email":"792847ea3b1e93419c207b30734992e9ebd004c9@iti.uni-luebeck.de","name":"Dariush Forouher"},"message":"Enable TLSv1.1+, disable SSLv3\n\nThis patch forces Seadroid to use a specific list of TLS protocols.\nSpecifically, SSLv3 is disabled, as it is considered insecure by now.\nAlso TLSv1.1+ are enabled (they are available with API 16+ but disabled\nup to API 19).\n\nTo do so, we have to inherit from SSLSocketFactory, which makes the codes\nsomewhat verbose. The upside is that this class can later be used to further\nmodify the Android defaults concerning SSL (e.g. cyphersuites used).\n\nThis patch also fixes a NPE when connecting to a server that only supports\nTLSv1.2.\n\nReferences:\n* https://developer.android.com/reference/javax/net/ssl/SSLSocket.html#getSupportedCipherSuites%28%29","distinct":true,"url":"https://api.github.com/repos/haiwen/seadroid/commits/a6c6923ddbb69f43380190f88d5a36c13e1f8f40"},{"sha":"7eb70ba0398c79791e0bd98e3270030992d94908","author":{"email":"792847ea3b1e93419c207b30734992e9ebd004c9@iti.uni-luebeck.de","name":"Dariush Forouher"},"message":"Specifiy TLS cipher list\n\nBy default Android will offer the HTTPS server ciphers which are today\nconsidered to be insecure (e.g. SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA).\nA properly configured server should reject those ciphers, but better be\non the safe side on not offer those ciphers by the client at all.\n\nAdditionally the order of the cipher matters as well, as more secure/fast\nciphers should be at the top of the list.\n\nThis patch adds a cipher list based on\nhttps://briansmith.org/browser-ciphersuites-01.html\n\nThe list has to be revised from time to time as the security of TLS\nis re-evaluated by security research.\n\nReferences:\n* https://briansmith.org/browser-ciphersuites-01.html\n* https://developer.android.com/reference/javax/net/ssl/SSLSocket.html","distinct":true,"url":"https://api.github.com/repos/haiwen/seadroid/commits/7eb70ba0398c79791e0bd98e3270030992d94908"},{"sha":"ccc76025acf5f706d79e32acb439d5e066ab6901","author":{"email":"792847ea3b1e93419c207b30734992e9ebd004c9@iti.uni-luebeck.de","name":"Dariush Forouher"},"message":"style fixes","distinct":true,"url":"https://api.github.com/repos/haiwen/seadroid/commits/ccc76025acf5f706d79e32acb439d5e066ab6901"},{"sha":"148cd7b91c53fbb56ad93c918b7d331754dd3883","author":{"email":"b7479730797611cd66e19bcdeedd12d74ad07068@gmail.com","name":"lins05"},"message":"Merge pull request #220 from forouher/fix/tls\n\nTLS protocol and cipher list improvements","distinct":true,"url":"https://api.github.com/repos/haiwen/seadroid/commits/148cd7b91c53fbb56ad93c918b7d331754dd3883"}]}