Commit graph android_packages_modules_Co.../networksecurity/service/Android.bp
Message SHA1
Add checks for CT public key against allowlist
This CL adds a check to make sure the public key downloaded by the CTDownloader
matches a known allowlist of keys. If the key does not appear in the allowlist,
we cannot make guarantee that the key has not been tampered with, so we will not
proceed with the downloads of the CT log list and its signature.

Bug: 374719543
Test: atest NetworkSecurityUnitTests
Change-Id: I185a2330d9a4d138c93522cd4b22920e8a2412a2

Sandro Montanari   commited 2025-03-05 11:16:10 +00:00
32c060fc81
Add logging of cause of failure when the log list fails to update
Bug: 378626065
Flag: com.android.net.ct.flags.certificate_transparency_service
Test: atest NetworkSecurityUnitTests
Change-Id: I4c11d7b09ae0f32fccbdf4085192a0f04cd2321e

Bessie Jiang   commited 2024-12-23 17:15:00 +00:00
a1082d8444
Gate CT via the certificateTransparencyConfiguration flag
Flag: android.security.Flags.certificateTransparencyConfiguration
Bug: 379988507
Test: atest NetworkSecurityUnitTests
Change-Id: Iffa024d427e120e10847ff03d1fd62f83c45ee3e

Sandro Montanari   commited 2024-12-12 14:48:54 +00:00
88564f625c
Log CT log list download failures
This CL adds a DownloadStatus class inside the DownloadHelper. The class
acts as a thin wrapper around the status and reason Ids returned by the
DownloadManager, with some utility methods to help with the
interpretation of the download status.

Bug: 319829948
Test: atest NetworkSecurityUnitTests
Change-Id: I111388ee37c09e30c02bb9bc9b3d65273961b91d

Sandro Montanari   commited 2024-11-12 11:13:02 +00:00
478ba513aa
Make java_sdk_library dependencies explicit
modules should specify the submodule of java_sdk_library that the module
actually depends on

Test: CI
Bug: 358613520
Change-Id: I0367068c901df98483f6cf95160d3e7801881b0a

Jihoon Kang   commited 2024-09-10 00:01:31 +00:00
8401b6a9f0
Add listeners for CertificateTranspaency DeviceConfig flags
Flag: com.android.ct.flags.certificate_transparency_service
Bug: 319829948
Test: adb shell device_config put certificate_transparency log_list_data_url <url>
Change-Id: Ief074fbef21ca18e6882852d53e90e7ddbbd78fa

Sandro Montanari   commited 2024-08-13 15:53:57 +00:00
1f4ddd0cf7
Add boilerplate code for CertificateTransparencyService
Flag: com.android.ct.flags.certificate_transparency_service
Bug: 319829948
Test: m
Change-Id: I69dd1b7346a013e9a990c9ae8cec1beb51be074d

Sandro Montanari   commited 2024-08-12 08:50:29 +00:00
9ffc0685d7