1
89%
master: 89%

Ran 03 May 2026 08:17PM UTC

Files 652

Run time 12s

Badge

Embed ▾

Committed 01 May 2026 01:55PM UTC coverage: 88.797% (-0.03%) from 88.827%

Job # #20258.1

Build Type

push

github

Committed by

web-flow

Commit Message

okhttp: enable TLS 1.3 on Android, retain TLS 1.2-only for desktop JVM

The ConnectionSpec used by OkHttpChannelBuilder had TLS 1.3 explicitly
disabled since Dec 2020 due to a Conscrypt/SunJSSE incompatibility.
However, this incompatibility does not affect Android. The previous code
applied the TLS 1.2-only restriction unconditionally to all platforms.

Regulatory impact: TLS 1.2 is classified as a legacy mechanism in ENISA
Agreed Cryptographic Mechanisms v2.0 (April 2025), with TLS 1.3 listed
as the recommended protocol. This limitation has been forcing all
downstream components using grpc-okhttp on Android to operate with a
legacy protocol, creating compliance friction with the EU Radio
Equipment Directive (RED) and EU Cyber Resilience Act (CRA)
certification requirements.

Fixes: https://github.com/grpc/grpc-java/issues/7431 (Android only)
Fixes: https://github.com/grpc/grpc-java/issues/7765 (Android only)

Coverage Stats

36136 of 40695 relevant lines covered (88.8%)

0.89 hits per line

grpc / grpc-java / #20258 / 1
89%
master: 89%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job #20258.1

grpc / grpc-java / #20258 / 1 89% master: 89%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job #20258.1

grpc / grpc-java / #20258 / 1
89%
master: 89%

README BADGES
x