bump compatibility version

.gitlab-ci.yml

@@ -2,11 +2,11 @@ stages:
   - build
 
 variables:
-  version: "v2.15.3_unofficial_50"
+  version: "v2.15.3_unofficial_41"
   GRADLE_OPTS: -Dorg.gradle.daemon=false
 
 build:
-  image: gradle:7.4
+  image: gradle:7.2
   stage: build
   script:
     - ./build.sh
@@ -17,16 +17,12 @@ build:
           - arm-unknown-linux-gnueabi
           - arm-unknown-linux-gnueabihf
           - armv7-unknown-linux-gnueabihf
-          - x86_64-unknown-linux-gnu
-          - x86_64-unknown-linux-musl
+          - x86-64-unknown-linux-gnu
 
-build darwin:
+build x86_64-apple-darwin:
   stage: build
   tags: [darwin-builder]
   script:
     - ./build.sh
-  parallel:
-    matrix:
-      - TARGET:
-        - x86_64-apple-darwin
-        - aarch64-apple-darwin
+  variables:
+    TARGET: x86-64-apple-darwin

build.sh

@@ -5,7 +5,10 @@ cd libsignal-service-java
 git config user.email nobody@signald.org
 git config user.name signald
 git am ../libsignal-service-java.patch
-git am ../update-kbs-settings.patch
 python3 ../update-verification-metadata.py
 git diff --color=always
-gradle assemble publish || (gradle --write-verification-metadata sha256 && git diff --color=always && exit 1)
+gradle assemble || (gradle --write-verification-metadata sha256 && git diff --color=always && exit 1)
+
+if [ "$CI_COMMIT_REF_PROTECTED" == "true" ]; then
+    gradle publish
+fi

hashes.json

@@ -1,34 +1,26 @@
 {
     "aarch64-unknown-linux-gnu": {
-        "jar": "802529c1472f7e621cca496c918d7bfec08314572f10e168b0d20b15a5b8101a",
-        "module": "48e315037d2d9af6c7cf7b811d9a81d81b1eff13cbb1837b7638a3803b68f303"
+        "jar": "84f1dbec74350455499fd816bed1bcb669ba4ae52febe3becd288a51a3e0fb6f",
+        "module": "055aaee5b721a46d1e68b629605ba6cf0f41cd6988e8cc14aa8304a7d6b9a48b"
     },
     "arm-unknown-linux-gnueabi": {
-        "jar": "8ef66fe1ae28fe7b2918292824ef33a41a3432c3a981cfa55665106c89348327",
-        "module": "7c988dfb2fca57ff0aabd7bd88ebfa5658be8722adb0831a5140aed3d1529097"
+        "jar": "c982ca418e30cc145a40f50ece27d0fb0a5cfb033ea7bd1a24190e0c885850af",
+        "module": "4fd7495f381ac2f202c3850644ecea1e4ecf9c864fcf9e81c35e2b260d33f7b1"
     },
     "arm-unknown-linux-gnueabihf": {
-        "jar": "446a796b0a2a062c65d9d5cb75a3fd4aadc03ab321b52c39a5bfe1e6f9dc9891",
-        "module": "30e6a82cc6d2b01b57b758d8352c9d90926f31becfe6218c43d2614a309c9cbc"
+        "jar": "705cc667cb3b056ed2186b848882ca48217f5dc2a891197b950deaf1fe6fa2e5",
+        "module": "8790e629212b73b650c3c89b1f496c6fbbb00c26540141eb2d422b32aeb88c29"
     },
     "armv7-unknown-linux-gnueabihf": {
-        "jar": "3e896a52cf5816387094137403c112353de93f4b7591bcfc5965e89ef3777c5b",
-        "module": "39be083718c6b8afe94e2ccff63c918ea1255292881afbb60b12236cd4b70dc6"
+        "jar": "f444ef54a71c8dd631d33ec29f209116c1400d6927c9ceed22444760e80bec44",
+        "module": "78d253a756953563b67687c6f9a8d5e0cbdccac2e5066156a7057e848e781610"
     },
-    "x86_64-unknown-linux-gnu": {
-        "jar": "b38295eb11df91939b872f49eb8b55b2faf7933da92202b95d82320f4cdcb644",
-        "module": "1b739335cde181864882481f5feca8fca3f7baa439f79c36ac596a781e6d4477"
+    "x86-64-unknown-linux-gnu": {
+        "jar": "54b4359ddec3b86663d26c4004a3f6963e9a36b5e180cb0b9d08f1dd17a0d51c",
+        "module": "22286c2ff5dc69a2773e5ca861de8baa2435e94fdf65e5408dec79cb14f5b4d9"
     },
-    "x86_64-apple-darwin": {
-        "jar": "949a72b14d81389a30e330db3162f822a475d0f19087590f334639acdb01b4eb",
-        "module": "7de5da969225585d36d68ba7a87c80d33886e36a04dea9d78ef8c2df9f6a3bf2"
-    },
-    "aarch64-apple-darwin": {
-        "jar": "e7f405b1c521054bbea8ec0ff87c54527f17e8c914079d7805c4def3589e8af1",
-        "module": "3c153a7e01ae317280981e387d3fd002b7106ce65653be1b6e4216a4f4d9d314"
-    },
-    "x86_64-unknown-linux-musl": {
-        "jar": "9a46edb376089b6284cbc76c4e6bc21fa91f8ee7e3daf221d704243cfe0c16cf",
-        "module": "a35abf78dc674557ddc7da348d5eb2d015b4e843d5402df95922ba2780b36169"
+    "x86-64-apple-darwin": {
+        "jar": "1875944c286b35790a2d8542f908cf987468feff1c507e313b4de49753e10108",
+        "module": "067935bebc5a4887cb5c9dda69fccfd541efb40ea61626b3be47daa324b20a2b"
     }
 }

libsignal-service-java.patch

@@ -1,38 +1,41 @@
-From c51057ae26118490176af0b2421f8fa62d926c00 Mon Sep 17 00:00:00 2001
+From 2022d9a860a53d9ba3641ac2716f3197a8d85c10 Mon Sep 17 00:00:00 2001
 From: signald <nobody@signald.org>
-Date: Thu, 16 Jun 2022 13:04:00 -0700
-Subject: [PATCH] update build files and provide a way for the websocket
- receive callback to indicate the message was not saved
+Date: Fri, 11 Feb 2022 23:16:57 -0800
+Subject: [PATCH] update gradle files
 
 ---
- build.gradle                                  | 17 +++--------------
- dependencies.gradle                           |  3 +--
- gradle/verification-metadata.xml              | 13 ++++++++-----
- service/build.gradle                          | 19 +++++++++----------
- .../signalservice/api/NotSavedException.java  |  4 ++++
- .../signalservice/api/SignalWebSocket.java    | 13 ++++++++++---
- settings.gradle                               |  1 -
- 7 files changed, 35 insertions(+), 35 deletions(-)
- create mode 100644 service/src/main/java/org/whispersystems/signalservice/api/NotSavedException.java
+ build.gradle                     | 18 +++---------------
+ dependencies.gradle              |  3 +--
+ gradle/verification-metadata.xml | 11 +++++++++++
+ service/build.gradle             | 23 +++++++++++------------
+ settings.gradle                  |  2 --
+ 5 files changed, 26 insertions(+), 31 deletions(-)
 
 diff --git a/build.gradle b/build.gradle
-index 2498bfcb..81f7038d 100644
+index 41c2533..f486ea8 100644
 --- a/build.gradle
 +++ b/build.gradle
-@@ -9,11 +9,8 @@ buildscript {
+@@ -1,5 +1,6 @@
+ buildscript {
+     repositories {
++        maven {url "https://gitlab.com/api/v4/groups/6853927/-/packages/maven"} // https://gitlab.com/groups/signald/-/packages
+         google()
+         mavenCentral()
+     }
+@@ -9,11 +10,7 @@ buildscript {
      }
  }
  
 -plugins {
 -    id("io.github.gradle-nexus.publish-plugin") version "1.1.0"
 -}
- 
+-
 -project.group = "com.github.turasa"
 +project.group = "org.signald"
  
  def getRepositoryUsername() {
      return hasProperty('whisperSonatypeUsername') ? whisperSonatypeUsername : ""
-@@ -23,18 +20,10 @@ def getRepositoryPassword() {
+@@ -23,18 +20,9 @@ def getRepositoryPassword() {
      return hasProperty('whisperSonatypePassword') ? whisperSonatypePassword : ""
  }
  
@@ -44,31 +47,30 @@ index 2498bfcb..81f7038d 100644
 -        }
 -    }
 -}
- 
+-
  subprojects {
--    ext.lib_signal_service_version_number = "2.15.3_unofficial_50"
+     ext.lib_signal_service_version_number = "2.15.3_unofficial_41"
 -    ext.lib_signal_service_group_info     = "com.github.turasa"
-+    ext.lib_signal_service_version_number = "2.15.3_unofficial_50_signald_2"
 +    ext.lib_signal_service_group_info     = "org.signald"
  
      if (JavaVersion.current().isJava8Compatible()) {
          allprojects {
 diff --git a/dependencies.gradle b/dependencies.gradle
-index e4b9f8a8..20e0d2f2 100644
+index b9e6765..d57dea2 100644
 --- a/dependencies.gradle
 +++ b/dependencies.gradle
 @@ -8,8 +8,7 @@ dependencyResolutionManagement {
-             alias('google-libphonenumber').to('com.googlecode.libphonenumber:libphonenumber:8.12.48')
+             alias('google-libphonenumber').to('com.googlecode.libphonenumber:libphonenumber:8.12.33')
  
              // 1st Party
--            alias('libsignal-client').to('org.signal', 'libsignal-client').versionRef('libsignal-client')
--            alias('libsignal-android').to('org.signal', 'libsignal-android').versionRef('libsignal-client')
-+            alias('libsignal-client').to('org.signald', 'libsignal-client-' + System.getenv("TARGET")).versionRef('libsignal-client')
+-            alias('signal-client-java').to('org.whispersystems', 'signal-client-java').versionRef('signal-client')
+-            alias('signal-client-android').to('org.whispersystems', 'signal-client-android').versionRef('signal-client')
++            alias('signal-client-java').to('org.signald', 'signal-client-java-'+ System.getenv("TARGET").replaceAll("_", "-")).versionRef('signal-client')
  
              // Third Party
              alias('jackson-core').to('com.fasterxml.jackson.core:jackson-databind:2.13.0')
 diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
-index fc39d024..59fde59c 100644
+index 77f8957..01c281e 100644
 --- a/gradle/verification-metadata.xml
 +++ b/gradle/verification-metadata.xml
 @@ -482,6 +482,9 @@
@@ -81,28 +83,41 @@ index fc39d024..59fde59c 100644
        </component>
        <component group="com.google.testing.platform" name="core-proto" version="0.0.8-alpha04">
           <artifact name="core-proto-0.0.8-alpha04.jar">
-@@ -1133,12 +1136,12 @@
-             <sha256 value="95510c70f1bf0fd65ddc1f39fbf7a42d75d8a064dc3a2cbe52496fa2f2c535f0" origin="Generated by Gradle"/>
+@@ -1125,6 +1128,14 @@
+             <sha256 value="1dee0481072d19c929b623e155e14d2f6085dc011529a0a0dbefc84cf571d865" origin="Generated by Gradle"/>
           </artifact>
        </component>
--      <component group="org.signal" name="libsignal-client" version="0.17.0">
--         <artifact name="libsignal-client-0.17.0.jar">
--            <sha256 value="3611dc9425d7ef85daedbafa49fa67f49e921bf89e36f601d0b79b1268315619" origin="Generated by Gradle"/>
-+      <component group="org.signald" name="libsignal-client-{TARGET}" version="0.17.0">
-+         <artifact name="libsignal-client-{TARGET}-0.17.0.jar">
++      <component group="org.signald" name="signal-client-java-{TARGET}" version="0.12.3">
++         <artifact name="signal-client-java-{TARGET}-0.12.3.jar">
 +            <sha256 value="{TARGET_JAR_SHA256}" origin="Generated by Gradle"/>
-          </artifact>
--         <artifact name="libsignal-client-0.17.0.module">
--            <sha256 value="cc6125c6e30421eb39a115576371a41f0adde7ea501e99d2c74192264e6fb1ab" origin="Generated by Gradle"/>
-+         <artifact name="libsignal-client-{TARGET}-0.17.0.module">
++         </artifact>
++         <artifact name="signal-client-java-{TARGET}-0.12.3.module">
 +            <sha256 value="{TARGET_MODULE_SHA256}" origin="Generated by Gradle"/>
-          </artifact>
-       </component>
++          </artifact>
++      </component>
        <component group="org.tensorflow" name="tensorflow-lite-metadata" version="0.1.0-rc2">
+          <artifact name="tensorflow-lite-metadata-0.1.0-rc2.jar">
+             <sha256 value="2c2a264f842498c36d34d2a7b91342490d9a962862c85baac1acd54ec2fca6d9" origin="Generated by Gradle"/>
 diff --git a/service/build.gradle b/service/build.gradle
-index ae4df43a..4b0240d8 100644
+index db7d2eb..307642b 100644
 --- a/service/build.gradle
 +++ b/service/build.gradle
+@@ -5,13 +5,13 @@ apply plugin: 'maven-publish'
+ apply plugin: 'signing'
+ apply plugin: 'idea'
+ 
+-sourceCompatibility = 1.8
++sourceCompatibility = 1.9
+ archivesBaseName    = "signal-service-java"
+ version             = lib_signal_service_version_number
+ group               = lib_signal_service_group_info
+ 
+ java {
+-    targetCompatibility = 1.8
++    targetCompatibility = 1.9
+     withJavadocJar()
+     withSourcesJar()
+ }
 @@ -21,6 +21,7 @@ compileJava {
  }
  
@@ -111,16 +126,24 @@ index ae4df43a..4b0240d8 100644
      mavenCentral()
      mavenLocal()
  }
-@@ -98,7 +99,7 @@ def getRepositoryPassword() {
+@@ -74,7 +75,6 @@ protobuf {
+ idea {
+     module {
+         generatedSourceDirs += file("${protobuf.generatedFilesBaseDir}/main/java")
+-        scopes.COMPILE.plus += [configurations.ideaTestFixturesImplementation]
+     }
+ }
+ 
+@@ -98,7 +98,7 @@ def getRepositoryPassword() {
  publishing {
      publications {
          mavenJava(MavenPublication) {
 -            artifactId = 'signal-service-java'
-+            artifactId = 'signal-service-java-' + System.getenv("TARGET")
++            artifactId = 'signal-service-java-' + System.getenv("TARGET").replaceAll("_", "-")
              from components.java
  
              pom {
-@@ -139,16 +140,14 @@ publishing {
+@@ -139,16 +139,15 @@ publishing {
  
      repositories {
          maven {
@@ -132,81 +155,30 @@ index ae4df43a..4b0240d8 100644
 +            credentials(HttpHeaderCredentials) {
 +                name = 'Job-Token'
 +                value = System.getenv("CI_JOB_TOKEN")
-+            }
-+            authentication {
-+                 header(HttpHeaderAuthentication)
              }
++            authentication {
++                header(HttpHeaderAuthentication)
++             }
          }
      }
  }
--
+ 
 -signing {
 -    required { isReleaseBuild() && gradle.taskGraph.hasTask("uploadArchives") }
 -    sign publishing.publications.mavenJava
 -}
-diff --git a/service/src/main/java/org/whispersystems/signalservice/api/NotSavedException.java b/service/src/main/java/org/whispersystems/signalservice/api/NotSavedException.java
-new file mode 100644
-index 00000000..05d77d1f
---- /dev/null
-+++ b/service/src/main/java/org/whispersystems/signalservice/api/NotSavedException.java
-@@ -0,0 +1,4 @@
-+package org.whispersystems.signalservice.api;
-+
-+public class NotSavedException extends Exception {
-+}
-diff --git a/service/src/main/java/org/whispersystems/signalservice/api/SignalWebSocket.java b/service/src/main/java/org/whispersystems/signalservice/api/SignalWebSocket.java
-index 5a98f3c4..dff24940 100644
---- a/service/src/main/java/org/whispersystems/signalservice/api/SignalWebSocket.java
-+++ b/service/src/main/java/org/whispersystems/signalservice/api/SignalWebSocket.java
-@@ -243,6 +243,7 @@ public final class SignalWebSocket {
-     while (true) {
-       WebSocketRequestMessage  request  = getWebSocket().readRequest(timeout);
-       WebSocketResponseMessage response = createWebSocketResponse(request);
-+      boolean sendResponse = true; // indicates the acknowledgement should be sent to the server
-       try {
-         if (isSignalServiceEnvelope(request)) {
-           Optional<String> timestampHeader = findHeader(request);
-@@ -258,13 +259,19 @@ public final class SignalWebSocket {
- 
-           SignalServiceEnvelope envelope = new SignalServiceEnvelope(request.getBody().toByteArray(), timestamp);
- 
--          callback.onMessage(envelope);
-+          try {
-+            callback.onMessage(envelope);
-+          } catch (NotSavedException e) {
-+            sendResponse = false;
-+          }
-           return Optional.of(envelope);
-         } else if (isSocketEmptyRequest(request)) {
-           return Optional.empty();
-         }
-       } finally {
--        getWebSocket().sendResponse(response);
-+        if(sendResponse) {
-+          getWebSocket().sendResponse(response);
-+        }
-       }
-     }
-   }
-@@ -315,6 +322,6 @@ public final class SignalWebSocket {
-    * received.
-    */
-   public interface MessageReceivedCallback {
--    void onMessage(SignalServiceEnvelope envelope);
-+    void onMessage(SignalServiceEnvelope envelope) throws NotSavedException;
-   }
- }
 diff --git a/settings.gradle b/settings.gradle
-index 8861c008..8dd03423 100644
+index 8861c00..4048aab 100644
 --- a/settings.gradle
 +++ b/settings.gradle
-@@ -1,6 +1,5 @@
+@@ -1,7 +1,5 @@
  enableFeaturePreview('VERSION_CATALOGS')
  
 -include ':android'
- 
+-
  include 'libsignal-service'
  project(':libsignal-service').projectDir = file('service')
+ 
 -- 
 2.30.2
 

update-hashes.py

@@ -3,19 +3,17 @@ import requests
 import hashlib
 import json
 
-VERSION = "0.17.0"
+VERSION = "0.12.3"
 TARGETS = [
     "aarch64-unknown-linux-gnu",
     "arm-unknown-linux-gnueabi",
     "arm-unknown-linux-gnueabihf",
     "armv7-unknown-linux-gnueabihf",
-    "x86_64-unknown-linux-gnu",
-    "x86_64-apple-darwin",
-    "x86_64-unknown-linux-musl",
-    "aarch64-apple-darwin"
+    "x86-64-unknown-linux-gnu",
+    "x86-64-apple-darwin"
 ]
 
-urlFormat = "https://gitlab.com/api/v4/groups/6853927/-/packages/maven/org/signald/libsignal-client-{target}/{version}/libsignal-client-{target}-{version}.{ext}"
+urlFormat = "https://gitlab.com/api/v4/groups/6853927/-/packages/maven/org/signald/signal-client-java-{target}/{version}/signal-client-java-{target}-{version}.{ext}"
 output = {}
 
 for target in TARGETS:

update-kbs-settings.patch

@@ -1,38 +0,0 @@
-From d432b9234521947d7bb07434f69a30b407700f5c Mon Sep 17 00:00:00 2001
-From: Greyson Parrelli <greyson@signal.org>
-Date: Thu, 20 Oct 2022 13:12:27 -0400
-Subject: [PATCH 2/2] [Signal-Android] Updated KBS settings.
- 9941ffe79c2508eb9b1f1fa78b47b84c465d1199
-
----
- .../internal/contacts/crypto/RemoteAttestationCipher.java  | 7 ++++++-
- 1 file changed, 6 insertions(+), 1 deletion(-)
-
-diff --git a/service/src/main/java/org/whispersystems/signalservice/internal/contacts/crypto/RemoteAttestationCipher.java b/service/src/main/java/org/whispersystems/signalservice/internal/contacts/crypto/RemoteAttestationCipher.java
-index 05073edf..32e86c70 100644
---- a/service/src/main/java/org/whispersystems/signalservice/internal/contacts/crypto/RemoteAttestationCipher.java
-+++ b/service/src/main/java/org/whispersystems/signalservice/internal/contacts/crypto/RemoteAttestationCipher.java
-@@ -24,6 +24,11 @@ import java.util.Set;
- 
- public final class RemoteAttestationCipher {
- 
-+  private static final Set<String> ALLOWED_ADVISORIES = new HashSet<String>() {{
-+    add("INTEL-SA-00334");
-+    add("INTEL-SA-00615");
-+  }};
-+
-   private RemoteAttestationCipher() {
-   }
- 
-@@ -100,7 +105,7 @@ public final class RemoteAttestationCipher {
-     if ("OK".equals(entity.getIsvEnclaveQuoteStatus())) {
-       return true;
-     } else if ("SW_HARDENING_NEEDED".equals(entity.getIsvEnclaveQuoteStatus())) {
--      return entity.getAdvisoryIds().length == 1 && "INTEL-SA-00334".equals(entity.getAdvisoryIds()[0]);
-+      return Arrays.stream(entity.getAdvisoryIds()).allMatch(ALLOWED_ADVISORIES::contains);
-     } else {
-       return false;
-     }
--- 
-2.30.2
-