aboutsummaryrefslogtreecommitdiff
path: root/SECURITY.md
diff options
context:
space:
mode:
authorEric Anderson <ejona@google.com>2016-06-07 14:55:33 -0700
committerEric Anderson <ejona@google.com>2016-06-08 10:26:49 -0700
commit03d94509688c683d819f5fd2be7b6bde859a919d (patch)
tree50d9fea413f7c593c5ca61d4f0ea9550909a8524 /SECURITY.md
parent3f5a154a2d8809ce5f8e16194df7eafd74033cd3 (diff)
downloadgrpc-grpc-java-03d94509688c683d819f5fd2be7b6bde859a919d.tar.gz
netty: Use uber boringssl jar
Diffstat (limited to 'SECURITY.md')
-rw-r--r--SECURITY.md26
1 files changed, 5 insertions, 21 deletions
diff --git a/SECURITY.md b/SECURITY.md
index b77d1620b..e16361af0 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -32,7 +32,9 @@ Support for OpenSSL is only provided for the Netty transport via [netty-tcnative
As of version `1.1.33.Fork14`, netty-tcnative provides two options for usage: statically or dynamically linked. For simplification of initial setup,
we recommend that users first look at `netty-tcnative-boringssl-static`, which is statically linked against BoringSSL and Apache APR. Using this artifact requires no extra installation and guarantees that ALPN and the ciphers required for
-HTTP/2 are available.
+HTTP/2 are available. In addition, starting with `1.1.33.Fork16` binaries for
+all supported platforms can be included at compile time and the correct binary
+for the platform can be selected at runtime.
Production systems, however, may require an easy upgrade path for OpenSSL security patches. In this case, relying on the statically linked artifact also implies waiting for the Netty team
to release the new artifact to Maven Central, which can take some time. A better solution in this case is to use the dynamically linked `netty-tcnative` artifact, which allows the site administrator
@@ -60,21 +62,9 @@ In Maven, you can use the [os-maven-plugin](https://github.com/trustin/os-maven-
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-tcnative-boringssl-static</artifactId>
- <version>1.1.33.Fork14</version>
- <classifier>${os.detected.classifier}</classifier>
+ <version>1.1.33.Fork17</version>
</dependency>
</dependencies>
-
- <build>
- <extensions>
- <!-- Use os-maven-plugin to initialize the "os.detected" properties -->
- <extension>
- <groupId>kr.motd.maven</groupId>
- <artifactId>os-maven-plugin</artifactId>
- <version>1.4.0.Final</version>
- </extension>
- </extensions>
- </build>
</project>
```
@@ -87,16 +77,10 @@ buildscript {
repositories {
mavenCentral()
}
- dependencies {
- classpath 'com.google.gradle:osdetector-gradle-plugin:1.4.0'
- }
}
-// Use the osdetector-gradle-plugin
-apply plugin: "com.google.osdetector"
-
dependencies {
- compile 'io.netty:netty-tcnative-boringssl-static:1.1.33.Fork14:' + osdetector.classifier
+ compile 'io.netty:netty-tcnative-boringssl-static:1.1.33.Fork17'
}
```