https://github.com/smartdevicelink/sdl_security_java_suite

Open Source TLS Based Security Library for SDL Java Suite
https://github.com/smartdevicelink/sdl_security_java_suite

Last synced: 4 days ago
JSON representation

Open Source TLS Based Security Library for SDL Java Suite

• Host: GitHub
• URL: https://github.com/smartdevicelink/sdl_security_java_suite
• Owner: smartdevicelink
• License: bsd-3-clause
• Created: 2019-09-23T18:15:50.000Z (about 5 years ago)
• Default Branch: master
• Last Pushed: 2021-07-08T15:24:48.000Z (over 3 years ago)
• Last Synced: 2024-04-13T03:34:32.623Z (7 months ago)
• Language: C
• Homepage:
• Size: 26.8 MB
• Stars: 2
• Watchers: 10
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • Contributing: .github/CONTRIBUTING.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# SDL Security Java Suite

SDL Security is a TLS based security library built to interact with sdl_java_suite and provide TLS certificate authentication and encryption / decryption.

### When is this useful?

This library can be used to allow TLS authentication on a specific RPC service, for example the RPC or Video service.

### How do I use it?

This library is primarily for automotive OEMs to base their own proprietary library on. The OEM may change the URL to retrieve a certificate, and may want to provide additional protection to this library. Otherwise, it will be quite easy for an attacker to take the certificate and defeat the TLS protection.

The OEM must also rename this library and classes for the reasons seen below.

To use this library, the developer will pass the name of the class into the `SdlManager`'s builder' method:

```

List> secList = new ArrayList<>();

secList.add(SdlSecurity.class);

builder.setSdlSecurity(secList, null);

```

They must also pass in the name of the Vehicle 'Makes' that library is used for, for example, a Ford library may be used for `["Ford", "Lincoln"]`. This must match what is passed through the `register app interface` RPC response. For more information on how to setup the library, please check the [resources folder](/resources/readme.md).

#### Rebuild Native Code

If you would like to rebuild the native code for OpenSSL or tlsEngine, please check the [instructions here](/resources/compile_native_code.md).

#### Security Note:

Anyone implementing this library should take care to add additional protections as this library is not cryptographically secure out-of-the box.