Search code examples
javaandroidopensslandroid-security

Google Mandatory update to latest OpenSSL


Recently I got a mail from Google asking me to update OpenSSL or else my application would be blocked. They mentioned the steps to check OpenSSl version which I did and found that my things like MD5 SHA(encryption Algo's) are using version 1.0.1h.

My Question is how can I update these as I'm using latest JDK already and these are part of that only. Please suggest what should I do?

MD4 part of OpenSSL 1.0.1h 5 Jun 2014
MD5 part of OpenSSL 1.0.1h 5 Jun 2014
RC2 part of OpenSSL 1.0.1h 5 Jun 2014
RIPE-MD160 part of OpenSSL 1.0.1h 5 Jun 2014
SHA1 part of OpenSSL 1.0.1h 5 Jun 2014
SHA-256 part of OpenSSL 1.0.1h 5 Jun 2014
SHA-512 part of OpenSSL 1.0.1h 5 Jun 2014
DlSHA part of OpenSSL 1.0.1h 5 Jun 2014

IDE: Android Studio 2.0 buildToolsVersion "21.1.2" com.android.tools.build:gradle:1.3.0 JDK 1.8


Solution

  • Finally got the answer for this
     1. Update Android Studio to 2.1.1 i.e. latest
     2. Update build tools wrapper etc all kinds of tools.
     3. Update all your libraries in my case major issue was from this side
     4. Clean build after this and you are good to go.
     5. Check again for OpenSSL version and now you are up-to-date.