microg / microg/GmsCore

Conscrypt library is better as separate apk

Open
#802 4 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
Java
Stars
14.6k
Forks
3.2k
Avg merge
12d 11h
Merged PRs (30d)
4

Description

@mar-v-in
@voidstarstar

Conscrypt library alone (also with maximum compression) is bigger then the entire GmsCore, I think it would be better as separate apk.
As bonus it could be put on F-Droid default repository and updated without updating GmsCore (improving security earlier).

PS: It would be nice to update conscrypt to 2.1.0 since it include fixes for broken use of TLS_FALLBACK_SCSV that may cause problems with TLS 1.3 servers.
PS2: The code must be excluded for armeabi (NOT v7) since the library isn't included.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing how the Conscrypt library is included in GmsCore and how Android APK contents and the armeabi target are configured. Check the current Conscrypt version and its F-Droid packaging constraints. Done means Conscrypt is separately installable and updatable, uses the requested version, and is excluded for armeabi without breaking supported builds.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, java
Domain
build-system, mobile-dev, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.