Conscrypt is a Java Security Provider (JSP) that implements parts of the Java Cryptography Extension (JCE) and Java Secure Socket Extension (JSSE). It uses BoringSSL to provide cryptograhpic primitives and Transport Layer Security (TLS) for Java applications on Android and OpenJDK.

The core SSL engine has borrowed liberally from the Netty project and their work on netty-tcnative, giving Conscrypt similar performance.

NOTE: This section is under construction! Artifacts have not yet been published to the public Maven repositories.

You can download the JARs directly from the Maven repositories.

Use the os-maven-plugin to add the dependency:

<build>
  <extensions>
    <extension>
      <groupId>kr.motd.maven</groupId>
      <artifactId>os-maven-plugin</artifactId>
      <version>1.4.1.Final</version>
    </extension>
  </extensions>
</build>

<dependency>
  <groupId>org.conscrypt</groupId>
  <artifactId>conscrypt-openjdk</artifactId>
  <version>0.0.1-SNAPSHOT</version>
  <classifier>${os.detected.classifier}</classifier>
</dependency>

Use the osdetector-gradle-plugin (which is a wrapper around the os-maven-plugin) to add the dependency:

buildscript {
  repositories {
    mavenCentral()
  }
  dependencies {
    classpath 'com.google.gradle:osdetector-gradle-plugin:1.4.0'
  }
}

// Use the osdetector-gradle-plugin
apply plugin: "com.google.osdetector"

dependencies {
  compile 'org.conscrypt:conscrypt-jdk:0.0.1-SNAPSHOT:' + osdetector.classifier
}

Artifacts are available for the following platforms:

If you are making changes to Conscrypt, see the building instructions.

Here's a quick readers' guide to the code to help folks get started. At a high level there are three distinct modules: Common, Android & OpenJDK.

This contains the bulk of the code. It contains stub classes for platform-specific functions, which are stripped out of the final JAR.

It also contains all of the native code, but does not build any native artifacts. Instead, the platform-specific modules will include this source in their builds.

This module provides the Platform class for Android and also adds compatibility classes for supporting various versions of Android. This generates an apk library artifact.

This modules provides the Platform class for non-Android (OpenJDK-based) systems. It also provides a native library loader supports bundling the shared library with the JAR.