Skip to content
Snippets Groups Projects
  1. Jan 13, 2023
  2. Jan 12, 2023
  3. Jan 11, 2023
  4. Jan 10, 2023
    • Yan Yan's avatar
      Expose APIs to migrate IpSecTransform · 81c2160a
      Yan Yan authored
      This commit exposes APIs to migrate a tunnel mode transform to
      new source/destination addresses, as required by MOBIKE.
      
      By calling the exposed API, the caller only caches the new
      address in the transform. To complete the migration, caller
      MUST apply the tranform to the appropriate tunnel.
      
      This API design is mainly based on the kernel interface and use
      cases. The Linux kernel requires Android to provide both the
      IpSecTransform and the IpSecTunnelInterface to perform the
      migration. And in most cases those two instances are managed
      by different entities: IpSecTranform is managed by the key
      exchange protocol (e.g. IKE) and IpSecTunnelInterface is managed by
      the security tunnel provider (e.g. VPN, VCN, and IWLAN). Thus the
      migration process has been designed to have two steps where the
      key exchange protocol negotiates and caches the new address,
      passes out the updated transform, and the security tunnel
      provider applies the transform to a tunnel.
      
      Another benefit of this API is it can also apply to the case
      where the network peer does not support MOBIKE and thus cannot
      update the existing transforms. In this case, the key exchange
      protocol can create a new transform and give it to the security
      tunnel provider, and the tunnel provider can still call "apply"
      to perform migration without needing to know the details of the
      transform update process.
      
      Bug: 169171001
      Test: atest FrameworksNetTests, IpSecManagerTunnelTest
      Change-Id: I0658cdb09fb31f7e0fb9d0b07f37c2b72b6e705f
      81c2160a
    • Mohannad Farrag's avatar
      gn2bp: Add JNI jarjaring prefix · a4191eb8
      Mohannad Farrag authored
      * Add the prefix to make sure that cronet's implementation still connects correctly through the JNI layer after jarjaring.
      
      Test: atest CtsCronetTestCases
      Change-Id: I38cf1aa30b9211d65efc359eb1eae9244dcd7d10
      a4191eb8
    • Patrick Rohr's avatar
      66e9af63
    • Patrick Rohr's avatar
      cronet: remove apex_available:platform · 2b3b00ef
      Patrick Rohr authored
      Remove temporary workaround to b/203203405.
      
      Test: ./update_results.sh
      Change-Id: I0457b3e50e5d914eb2c88864710392959619787a
      2b3b00ef
Loading