Skip to content

Commit 6bfd89d

Browse files
Lukas Müllerfacebook-github-bot
Lukas Müller
authored andcommitted
Update OkHttp to 3.14.9 to improve security (#30609)
Summary: Okhttp 3.12.X allows Connections using TLS 1.0 and TLS1.1. TLS 1.0 and TLS 1.1 are no longer secure. Google, Mozilla, Microsoft, and Apple announced that their browsers will require TLSv1.2 or better starting in early 2020. https://square.github.io/okhttp/changelog_3x/#version-310 https://github.com/facebook/react-native/wiki/Changelog Starting from 3.13.0 TLSv1 and TLSv1.1 are no longer enabled by default. 3.13.0 requires JAVA 8 and Android SDK 21 (which was blocking the Upgrade in the Past). ## Changelog [Android] [Changed] - Update Okhttp to version 3.14.19 Pull Request resolved: #30609 Test Plan: Current tests should pass. Connections using TLS 1.0 and TLS 1.1 should not be possible. Reviewed By: mdvacca Differential Revision: D25843511 Pulled By: fkgozali fbshipit-source-id: f0b648c8037f945130c6f9983404ee7f75b178cb
1 parent 9215980 commit 6bfd89d

File tree

2 files changed

+5
-5
lines changed

2 files changed

+5
-5
lines changed

ReactAndroid/gradle.properties

+1-1
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ JUNIT_VERSION=4.12
1212

1313
ANDROIDX_TEST_VERSION=1.1.0
1414
FRESCO_VERSION=2.0.0
15-
OKHTTP_VERSION=3.12.12
15+
OKHTTP_VERSION=3.14.9
1616
SO_LOADER_VERSION=0.9.0
1717

1818
BOOST_VERSION=1_63_0

ReactAndroid/src/main/third-party/java/okhttp/BUCK

+4-4
Original file line numberDiff line numberDiff line change
@@ -9,8 +9,8 @@ rn_prebuilt_jar(
99

1010
fb_native.remote_file(
1111
name = "okhttp3-binary.jar",
12-
sha1 = "d3e1ce1d2b3119adf270b2d00d947beb03fe3321",
13-
url = "mvn:com.squareup.okhttp3:okhttp:jar:3.12.12",
12+
sha1 = "3e6d101343c7ea687cd593e4990f73b25c878383",
13+
url = "mvn:com.squareup.okhttp3:okhttp:jar:3.14.9",
1414
)
1515

1616
rn_prebuilt_jar(
@@ -21,6 +21,6 @@ rn_prebuilt_jar(
2121

2222
fb_native.remote_file(
2323
name = "okhttp3-urlconnection-binary.jar",
24-
sha1 = "3cfbe11fb8c48d30600a70f90b3283fc858aea72",
25-
url = "mvn:com.squareup.okhttp3:okhttp-urlconnection:jar:3.12.12",
24+
sha1 = "c9a3b45b815cf2982415ec8145339f5af58989c3",
25+
url = "mvn:com.squareup.okhttp3:okhttp-urlconnection:jar:3.14.9",
2626
)

0 commit comments

Comments
 (0)