Draft
Conversation
Pull Request Test Coverage Report for Build 102Details
💛 - Coveralls |
- Add Android libssl.so dlopen path - BoringSSL compatibility: fall back to SSLeay() when OpenSSL_version_num() is unavailable - Load additional libcrypto functions (PEM_read_X509, X509_STORE_add_cert, X509_free) for Android CA cert loading - Android's /system/etc/security/cacerts/ uses MD5-based hash filenames but OpenSSL 3.x expects SHA1-based hashes; bypass hash lookup by iterating the cert directory and loading each cert directly into the X509_STORE Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
a6b1b5d to
f96aea9
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
libssl.sodlopen pathSSLeay()whenOpenSSL_version_num()is unavailablePEM_read_X509/X509_STORE_add_cert/X509_freefromlibcrypto.sofor direct CA cert loading/system/etc/security/cacerts/by iterating the directory and loading each cert directly into theX509_STOREFiles changed
src/tls/openssl.c— Android cert loading, BoringSSL compat, libssl.so dlopen🤖 Generated with Claude Code