search

appmattus / certificatetransparency

Certificate transparency for Android and JVM
Apache License 2.0
142 stars 29 forks source link

Ensure SSL cannot be used to retrieve log-list.json #110

Closed mattmook closed 3 months ago

mattmook commented 3 months ago

Fixes #104

SSLContext is mis-configured to allow SSLv3 protocol. This updates the code to only allow TLSv1.2 or TLSv1.3 by default.

codecov[bot] commented 3 months ago

Codecov Report

Attention: Patch coverage is 44.44444% with 5 lines in your changes are missing coverage. Please review.

Project coverage is 74.15%. Comparing base (1974547) to head (d2ba957). Report is 1 commits behind head on main.

Files Patch % Lines
...tetransparency/loglist/LogListDataSourceFactory.kt 44.44% 5 Missing :warning:
Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #110 +/- ## ============================================ + Coverage 74.10% 74.15% +0.04% Complexity 506 506 ============================================ Files 117 117 Lines 2093 2089 -4 Branches 325 325 ============================================ - Hits 1551 1549 -2 + Misses 402 400 -2 Partials 140 140 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.