Skip to content

feat(javanet): support Conscrypt security provider and PQC hybrid negotiation#2167

Draft
lqiu96 wants to merge 2 commits into
mainfrom
pqc-support-conscrypt
Draft

feat(javanet): support Conscrypt security provider and PQC hybrid negotiation#2167
lqiu96 wants to merge 2 commits into
mainfrom
pqc-support-conscrypt

Conversation

@lqiu96

@lqiu96 lqiu96 commented Jun 29, 2026

Copy link
Copy Markdown
Member

Adds fallback logic in NetHttpTransport to default to Conscrypt for SSLContext and fall back to the standard JDK TLS if Conscrypt is not available. Enables setting a custom security provider on the builder which takes precedence. Enforces PQC hybrid named groups (X25519MLKEM768, X25519) on Conscrypt sockets via a wrapped SSLSocketFactory.

@product-auto-label product-auto-label Bot added the size: m Pull request size is medium. label Jun 29, 2026
…otiation

Adds fallback logic in NetHttpTransport to default to Conscrypt for SSLContext and fall back to the standard JDK TLS if Conscrypt is not available. Enables setting a custom security provider on the builder which takes precedence. Enforces PQC hybrid named groups (X25519MLKEM768, X25519) on Conscrypt sockets via a wrapped SSLSocketFactory.

TAG=agy
CONV=385b9ab5-874c-4c9a-b331-66dab51fef61
@lqiu96 lqiu96 force-pushed the pqc-support-conscrypt branch 4 times, most recently from 9edb56a to 066bffb Compare June 30, 2026 20:52
… default, supporting default constructors

TAG=agy
CONV=385b9ab5-874c-4c9a-b331-66dab51fef61
@lqiu96 lqiu96 force-pushed the pqc-support-conscrypt branch from 066bffb to 3497a47 Compare June 30, 2026 22:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size: m Pull request size is medium.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant