[Android] Respect platform trust manager in SslStream - #124173

Merged

simonrozsival merged 42 commits into

dotnet:mainfrom

simonrozsival:feature/android-platform-trust-manager-107695

Jul 11, 2026

Commits on Feb 11, 2026

Use const char* for targetHost, improve ApkBuilder validation
simonrozsival
committed
fdfe650

Commits on Feb 12, 2026

Fix SNI ordering, client cert filtering, SIGSEGV crash, and CustomRootTrust validation
simonrozsival
committed
aceb23b

Commits on Feb 13, 2026

Refactor SSLStreamCreate, add custom trust KeyStore, fix JNI ref management
simonrozsival
committed
3a0f51c
Document trust model: platform + managed = more strict, never less
simonrozsival
committed
162d8f4
Refine managedTrustOnly: bypass platform only when user-provided ExtraStore exists
simonrozsival
committed
8c44e4d
Update src/tasks/AndroidAppBuilder/ApkBuilder.cs

simonrozsival
and
Copilot
authored
d39b4d2
Use CopyFilesToOutputDirectory instead of Publish for _PrepareNetworkSecurityConfig
simonrozsival
committed
f3ffdc9
Add ExtraStore bypass tests for AndroidPlatformTrust
simonrozsival
committed
1330726
Add network_security_config.xml regression tests
simonrozsival
committed
2cf562a
Add certificate pinning test via network_security_config.xml
simonrozsival
committed
81743df

Commits on Feb 14, 2026

Address Copilot review feedback in Android trust tests

simonrozsival
and
Copilot
committed
730c0a6

Commits on Feb 16, 2026

Register JNI native method for NativeAOT compatibility

simonrozsival
and
Copilot
committed
5b3545c
Fix JNI local reference leak in GetX509TrustManager

simonrozsival
and
Copilot
committed
13ffcdd

Commits on Mar 31, 2026

Merge remote-tracking branch 'upstream/main' into feature/android-platform-trust-manager-107695
simonrozsival
committed
25764c1

Commits on May 11, 2026

Merge upstream/main into feature/android-platform-trust-manager-107695

simonrozsival
and
Copilot
committed
24f7ea0
Mark IsCleartextTrafficPermitted / IsCertificateTrustedForHost as test-only

simonrozsival
and
Copilot
committed
385c402
Scrub dead API 21-23 SNI fallback code

simonrozsival
and
Copilot
committed
bafb4d8
Fail fast on RegisterNatives errors in DotnetProxyTrustManager init

simonrozsival
and
Copilot
committed
2fb692d
Cache X509TrustManagerExtensions and default platform trust manager

simonrozsival
and
Copilot
committed
8ab6324
Match const char* targetHost between pal_sslstream.h and .c

simonrozsival
and
Copilot
committed
9b009cd
Drop test-only platform-introspection helpers

simonrozsival
and
Copilot
committed
5ec8737
Add tests covering IP-literal and null TargetHost paths

simonrozsival
and
Copilot
committed
1c71843

Commits on May 13, 2026

Add Android platform trust coverage

simonrozsival
and
Copilot
committed
5ea9d7c
Address Android trust review feedback

simonrozsival
and
Copilot
committed
143ab89

Commits on May 19, 2026

Fix Android SSLStream cleanup on init failure

simonrozsival
and
Copilot
committed
99fd6ae
Reduce Android custom trust scope

simonrozsival
and
Copilot
committed
125a5b1
Merge branch 'main' of github.com:dotnet/runtime into feature/android-platform-trust-manager-107695
simonrozsival
committed
9ced526
Use SignedCms in Android platform trust test

simonrozsival
and
Copilot
committed
7709327
Use host task for Android test CA extraction

simonrozsival
and
Copilot
committed
cff87c1

Commits on May 20, 2026

Fix Android platform trust task restore

simonrozsival
and
Copilot
committed
ee382fc
Address Android trust review feedback

simonrozsival
and
Copilot
committed
5191c46

Commits on May 27, 2026

Merge branch 'main' into feature/android-platform-trust-manager-107695
simonrozsival
authored
2075d47

Commits on Jul 3, 2026

Commits on Jul 7, 2026

Address Android trust validation review feedback

simonrozsival
and
Copilot
committed
e33122c

Commits on Jul 8, 2026

Restore Android trust manager JNI export

simonrozsival
and
Copilot
committed
440b2ea

Commits on Jul 9, 2026

Merge branch 'main' into feature/android-platform-trust-manager-107695
simonrozsival
authored
243f7cd