Skip to content

ADFA-4633: Strip BouncyCastle PQC classes from keystore-generator-plugin APK#1504

Closed
davidschachterADFA wants to merge 1 commit into
stagefrom
adfa-4633
Closed

ADFA-4633: Strip BouncyCastle PQC classes from keystore-generator-plugin APK#1504
davidschachterADFA wants to merge 1 commit into
stagefrom
adfa-4633

Conversation

@davidschachterADFA

Copy link
Copy Markdown
Collaborator

Summary

  • Adds a stripBcprovPqc Gradle task that repacks bcprov-jdk18on excluding org/bouncycastle/pqc/**, so PQC classes never land in the APK
  • Excludes bcprov-jdk18on from bcpkix-jdk18on's transitive deps to prevent the unstripped jar from sneaking back in
  • Adds a reference to the root gradle/libs.versions.toml in the standalone plugin project's settings so plugin-api can resolve its version catalog during standalone builds

Test plan

  • keystore-generator-plugin builds successfully via ./gradlew assembleRelease
  • Keystore generation works end-to-end in the app
  • Verify org/bouncycastle/pqc/ is absent from the output APK: unzip -l build/outputs/apk/release/*.apk | grep pqc

🤖 Generated with Claude Code

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review for a one-time review, or @claude review always to subscribe this PR to a review on every future push.

Tip: disable this comment in your organization's Code Review settings.

…gin APK

Adds a stripBcprovPqc Gradle task that repacks bcprov-jdk18on excluding
org/bouncycastle/pqc/**, reducing APK size. Also wires in the root version
catalog so the standalone plugin build can resolve plugin-api's dependencies.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@davidschachterADFA davidschachterADFA changed the base branch from main to stage July 10, 2026 20:19
@hal-eisen-adfa

Copy link
Copy Markdown
Collaborator

Confusion. This version of the keystore generator is obsolete.

@davidschachterADFA davidschachterADFA deleted the adfa-4633 branch July 10, 2026 20:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants