smartdevicelink/sdl_security_java_suite

Open Source TLS Based Security Library for SDL Java Suite

sdl_security_java_suite's Issues

Certificate issuer and date are not verified

Currently, the library doesn't check if the app certificate is expired or not. It also doesn't check if the certificate issuer matches the expected OEM issuer.

Sdl java suite should be updated to 5.0.0

Bug Report

The java suite library that is included in the security library should be updated to the latest version 5.0.0

Issuer name in the code should be updated to match the certificate issuer

Bug Report

The hard-coded issuer name in the library doesn't match the certificate issuer and the library currently prints a warning message for that. We should update the hardcoded issuer and update the library to completely error out if the two names don't match.

Move constants to Java files to avoid recompiling Native layer

Bug Report

Currently, some of the configurable variables for sdl security are in the java layer (Constrants.java) and some are in the native layer (tlsEngine.cpp). It will be nice if we can put all the configs in the java layer so they are all in one place.
If that is not easy, add good docs in the read me to specify how to modify all configs.

Need to make sure we're not requiring the developer to recompile the c layer

Sdl java suite should be updated to 5.1.0

The java suite library that is included in the security library should be updated to the latest version 5.1.0

Use androidX

Bug Report

The support libraries should be replaced with the new AndroidX libraries

Regenerate certs in resources to be compatible with Ubuntu 20

The certificates need to be regenerated to be compatible with Ubuntu 20.04

Update License to 2020

License file should be updated from "Copyright (c) 2017 - 2019 SmartDeviceLink Consortium, Inc." to "Copyright (c) 2017 - 2020 SmartDeviceLink Consortium, Inc."