soul-browser/app/smali_classes4/okhttp3/internal/tls/BasicCertificateChainCleaner.smali
KaKi87 550ddb0413
Decompile and recreate Soul Browser v1.4.85 with APK CI builds (#1)
* Decompile and recreate Soul Browser v1.4.85 with APK CI builds

Co-authored-by: KaKi87 <KaKi87@pm.me>

* Fix CI build: include bundled google.jks and remove PR trigger

The apktool build failed in CI because app/unknown/.../google.jks was
excluded by the *.jks gitignore rule. Whitelist app-bundled JKS files
and commit the missing resource.

Also remove the redundant pull_request workflow trigger.

Co-authored-by: KaKi87 <KaKi87@pm.me>

* Change package ID to com.github.kaki87.soulbrowser

Rename the application ID so the rebuilt APK can be installed
alongside the original Soul Browser from Google Play.

- Update AndroidManifest package, permissions, providers, and actions
- Update R class references in smali (com/github/kaki87/soulbrowser/R)
- Update shortcuts.xml targetPackage
- Rename app label to "Soul Rebuild" for easy identification

Co-authored-by: KaKi87 <KaKi87@pm.me>

* Fix install compatibility: remove split APK metadata and bundle native libs

The rebuilt APK still declared requiredSplitTypes and Play Store split
metadata, causing Android to reject standalone installs as incompatible.

- Remove requiredSplitTypes and split-related manifest meta-data
- Merge native libs from all ABI splits with uncompressed storage
- Page-align before signing for extractNativeLibs=false
- Add .so to apktool doNotCompress list

Co-authored-by: KaKi87 <KaKi87@pm.me>

* Fix install failure: use apksigner v2/v3 and bundle arm64 native libs

Target SDK 36 requires APK Signature Scheme v2+, but jarsigner only
produces v1 signatures, causing Android to reject the install.

- Sign with apksigner (v1+v2+v3) instead of jarsigner
- Add arm64-v8a native libraries from universal Soul Browser 1.4.79
- Set extractNativeLibs=true for reliable sideload installs
- Commit stable debug keystore for consistent signatures across builds

Co-authored-by: KaKi87 <KaKi87@pm.me>

* Add committed debug keystore for consistent APK signatures

Co-authored-by: KaKi87 <KaKi87@pm.me>

* Fix startup crash: use original classes2.dex desugar libraries

Apktool recompiles smali_classes2 into a broken classes2.dex, causing
ClassNotFoundException for j$.com.android.tools.r8.a at ML Kit init.

Inject the original classes2.dex (Java 8+ desugar libs) after apktool
build instead of using the recompiled version.

Co-authored-by: KaKi87 <KaKi87@pm.me>

* Fix missing drawable resources from density split APKs

The base APK is an app bundle module; density-specific drawables like
seek_thumb_nor_b live in config.xhdpi.apk and were missing after rebuild,
causing Resources$NotFoundException at runtime.

- Merge non-9-patch resources from split APKs before apktool build
- Sync public.xml IDs from R smali only when backing files exist
- Add 713 density-specific resource IDs to public.xml

Co-authored-by: KaKi87 <KaKi87@pm.me>

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
2026-08-10 16:07:14 +02:00

590 lines
12 KiB
Smali

.class public final Lokhttp3/internal/tls/BasicCertificateChainCleaner;
.super Lokhttp3/internal/tls/CertificateChainCleaner;
.source "SourceFile"
# annotations
.annotation system Ldalvik/annotation/MemberClasses;
value = {
Lokhttp3/internal/tls/BasicCertificateChainCleaner$Companion;
}
.end annotation
.annotation runtime Lkotlin/Metadata;
d1 = {
"\u0000\u000c\n\u0002\u0018\u0002\n\u0002\u0018\u0002\n\u0002\u0008\u0002\u0018\u00002\u00020\u0001:\u0001\u0002\u00a8\u0006\u0003"
}
d2 = {
"Lokhttp3/internal/tls/BasicCertificateChainCleaner;",
"Lokhttp3/internal/tls/CertificateChainCleaner;",
"Companion",
"okhttp"
}
k = 0x1
mv = {
0x2,
0x2,
0x0
}
xi = 0x30
.end annotation
# instance fields
.field public final a:Lokhttp3/internal/tls/TrustRootIndex;
# direct methods
.method public constructor <init>(Lokhttp3/internal/tls/TrustRootIndex;)V
.locals 1
.line 1
const-string v0, "trustRootIndex"
.line 2
.line 3
invoke-static {p1, v0}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullParameter(Ljava/lang/Object;Ljava/lang/String;)V
.line 4
.line 5
.line 6
invoke-direct {p0}, Ljava/lang/Object;-><init>()V
.line 7
.line 8
.line 9
iput-object p1, p0, Lokhttp3/internal/tls/BasicCertificateChainCleaner;->a:Lokhttp3/internal/tls/TrustRootIndex;
.line 10
.line 11
return-void
.end method
.method public static b(Ljava/security/cert/X509Certificate;Ljava/security/cert/X509Certificate;I)Z
.locals 2
.line 1
invoke-virtual {p0}, Ljava/security/cert/X509Certificate;->getIssuerDN()Ljava/security/Principal;
.line 2
.line 3
.line 4
move-result-object v0
.line 5
invoke-virtual {p1}, Ljava/security/cert/X509Certificate;->getSubjectDN()Ljava/security/Principal;
.line 6
.line 7
.line 8
move-result-object v1
.line 9
invoke-static {v0, v1}, Lkotlin/jvm/internal/Intrinsics;->areEqual(Ljava/lang/Object;Ljava/lang/Object;)Z
.line 10
.line 11
.line 12
move-result v0
.line 13
if-nez v0, :cond_0
.line 14
.line 15
goto :goto_0
.line 16
:cond_0
invoke-virtual {p1}, Ljava/security/cert/X509Certificate;->getBasicConstraints()I
.line 17
.line 18
.line 19
move-result v0
.line 20
if-ge v0, p2, :cond_1
.line 21
.line 22
goto :goto_0
.line 23
:cond_1
:try_start_0
invoke-virtual {p1}, Ljava/security/cert/Certificate;->getPublicKey()Ljava/security/PublicKey;
.line 24
.line 25
.line 26
move-result-object p1
.line 27
invoke-virtual {p0, p1}, Ljava/security/cert/Certificate;->verify(Ljava/security/PublicKey;)V
:try_end_0
.catch Ljava/security/GeneralSecurityException; {:try_start_0 .. :try_end_0} :catch_0
.line 28
.line 29
.line 30
const/4 p0, 0x1
.line 31
return p0
.line 32
:catch_0
:goto_0
const/4 p0, 0x0
.line 33
return p0
.end method
# virtual methods
.method public final a(Ljava/lang/String;Ljava/util/List;)Ljava/util/List;
.locals 8
.line 1
const-string v0, "chain"
.line 2
.line 3
invoke-static {p2, v0}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullParameter(Ljava/lang/Object;Ljava/lang/String;)V
.line 4
.line 5
.line 6
const-string v0, "hostname"
.line 7
.line 8
invoke-static {p1, v0}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullParameter(Ljava/lang/Object;Ljava/lang/String;)V
.line 9
.line 10
.line 11
new-instance p1, Ljava/util/ArrayDeque;
.line 12
.line 13
invoke-direct {p1, p2}, Ljava/util/ArrayDeque;-><init>(Ljava/util/Collection;)V
.line 14
.line 15
.line 16
new-instance p2, Ljava/util/ArrayList;
.line 17
.line 18
invoke-direct {p2}, Ljava/util/ArrayList;-><init>()V
.line 19
.line 20
.line 21
invoke-virtual {p1}, Ljava/util/ArrayDeque;->removeFirst()Ljava/lang/Object;
.line 22
.line 23
.line 24
move-result-object v0
.line 25
const-string v1, "removeFirst(...)"
.line 26
.line 27
invoke-static {v0, v1}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullExpressionValue(Ljava/lang/Object;Ljava/lang/String;)V
.line 28
.line 29
.line 30
invoke-virtual {p2, v0}, Ljava/util/ArrayList;->add(Ljava/lang/Object;)Z
.line 31
.line 32
.line 33
const/4 v0, 0x0
.line 34
move v1, v0
.line 35
:goto_0
const/16 v2, 0x9
.line 36
.line 37
if-ge v0, v2, :cond_7
.line 38
.line 39
invoke-virtual {p2}, Ljava/util/ArrayList;->size()I
.line 40
.line 41
.line 42
move-result v2
.line 43
const/4 v3, 0x1
.line 44
sub-int/2addr v2, v3
.line 45
invoke-virtual {p2, v2}, Ljava/util/ArrayList;->get(I)Ljava/lang/Object;
.line 46
.line 47
.line 48
move-result-object v2
.line 49
const-string v4, "null cannot be cast to non-null type java.security.cert.X509Certificate"
.line 50
.line 51
invoke-static {v2, v4}, Lkotlin/jvm/internal/Intrinsics;->checkNotNull(Ljava/lang/Object;Ljava/lang/String;)V
.line 52
.line 53
.line 54
check-cast v2, Ljava/security/cert/X509Certificate;
.line 55
.line 56
iget-object v5, p0, Lokhttp3/internal/tls/BasicCertificateChainCleaner;->a:Lokhttp3/internal/tls/TrustRootIndex;
.line 57
.line 58
invoke-interface {v5, v2}, Lokhttp3/internal/tls/TrustRootIndex;->a(Ljava/security/cert/X509Certificate;)Ljava/security/cert/X509Certificate;
.line 59
.line 60
.line 61
move-result-object v5
.line 62
if-eqz v5, :cond_3
.line 63
.line 64
invoke-virtual {p2}, Ljava/util/ArrayList;->size()I
.line 65
.line 66
.line 67
move-result v1
.line 68
if-gt v1, v3, :cond_0
.line 69
.line 70
invoke-static {v2, v5}, Lkotlin/jvm/internal/Intrinsics;->areEqual(Ljava/lang/Object;Ljava/lang/Object;)Z
.line 71
.line 72
.line 73
move-result v1
.line 74
if-nez v1, :cond_1
.line 75
.line 76
:cond_0
invoke-virtual {p2, v5}, Ljava/util/ArrayList;->add(Ljava/lang/Object;)Z
.line 77
.line 78
.line 79
:cond_1
invoke-virtual {p2}, Ljava/util/ArrayList;->size()I
.line 80
.line 81
.line 82
move-result v1
.line 83
add-int/lit8 v1, v1, -0x2
.line 84
.line 85
invoke-static {v5, v5, v1}, Lokhttp3/internal/tls/BasicCertificateChainCleaner;->b(Ljava/security/cert/X509Certificate;Ljava/security/cert/X509Certificate;I)Z
.line 86
.line 87
.line 88
move-result v1
.line 89
if-eqz v1, :cond_2
.line 90
.line 91
goto :goto_2
.line 92
:cond_2
move v1, v3
.line 93
goto :goto_1
.line 94
:cond_3
invoke-virtual {p1}, Ljava/util/ArrayDeque;->iterator()Ljava/util/Iterator;
.line 95
.line 96
.line 97
move-result-object v5
.line 98
const-string v6, "iterator(...)"
.line 99
.line 100
invoke-static {v5, v6}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullExpressionValue(Ljava/lang/Object;Ljava/lang/String;)V
.line 101
.line 102
.line 103
:cond_4
invoke-interface {v5}, Ljava/util/Iterator;->hasNext()Z
.line 104
.line 105
.line 106
move-result v6
.line 107
if-eqz v6, :cond_5
.line 108
.line 109
invoke-interface {v5}, Ljava/util/Iterator;->next()Ljava/lang/Object;
.line 110
.line 111
.line 112
move-result-object v6
.line 113
invoke-static {v6, v4}, Lkotlin/jvm/internal/Intrinsics;->checkNotNull(Ljava/lang/Object;Ljava/lang/String;)V
.line 114
.line 115
.line 116
check-cast v6, Ljava/security/cert/X509Certificate;
.line 117
.line 118
invoke-virtual {p2}, Ljava/util/ArrayList;->size()I
.line 119
.line 120
.line 121
move-result v7
.line 122
sub-int/2addr v7, v3
.line 123
invoke-static {v2, v6, v7}, Lokhttp3/internal/tls/BasicCertificateChainCleaner;->b(Ljava/security/cert/X509Certificate;Ljava/security/cert/X509Certificate;I)Z
.line 124
.line 125
.line 126
move-result v7
.line 127
if-eqz v7, :cond_4
.line 128
.line 129
invoke-interface {v5}, Ljava/util/Iterator;->remove()V
.line 130
.line 131
.line 132
invoke-virtual {p2, v6}, Ljava/util/ArrayList;->add(Ljava/lang/Object;)Z
.line 133
.line 134
.line 135
:goto_1
add-int/lit8 v0, v0, 0x1
.line 136
.line 137
goto :goto_0
.line 138
:cond_5
if-eqz v1, :cond_6
.line 139
.line 140
:goto_2
return-object p2
.line 141
:cond_6
new-instance p1, Ljavax/net/ssl/SSLPeerUnverifiedException;
.line 142
.line 143
new-instance p2, Ljava/lang/StringBuilder;
.line 144
.line 145
const-string v0, "Failed to find a trusted cert that signed "
.line 146
.line 147
invoke-direct {p2, v0}, Ljava/lang/StringBuilder;-><init>(Ljava/lang/String;)V
.line 148
.line 149
.line 150
invoke-virtual {p2, v2}, Ljava/lang/StringBuilder;->append(Ljava/lang/Object;)Ljava/lang/StringBuilder;
.line 151
.line 152
.line 153
invoke-virtual {p2}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;
.line 154
.line 155
.line 156
move-result-object p2
.line 157
invoke-direct {p1, p2}, Ljavax/net/ssl/SSLPeerUnverifiedException;-><init>(Ljava/lang/String;)V
.line 158
.line 159
.line 160
throw p1
.line 161
:cond_7
new-instance p1, Ljavax/net/ssl/SSLPeerUnverifiedException;
.line 162
.line 163
new-instance v0, Ljava/lang/StringBuilder;
.line 164
.line 165
const-string v1, "Certificate chain too long: "
.line 166
.line 167
invoke-direct {v0, v1}, Ljava/lang/StringBuilder;-><init>(Ljava/lang/String;)V
.line 168
.line 169
.line 170
invoke-virtual {v0, p2}, Ljava/lang/StringBuilder;->append(Ljava/lang/Object;)Ljava/lang/StringBuilder;
.line 171
.line 172
.line 173
invoke-virtual {v0}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;
.line 174
.line 175
.line 176
move-result-object p2
.line 177
invoke-direct {p1, p2}, Ljavax/net/ssl/SSLPeerUnverifiedException;-><init>(Ljava/lang/String;)V
.line 178
.line 179
.line 180
throw p1
.end method
.method public final equals(Ljava/lang/Object;)Z
.locals 2
.line 1
const/4 v0, 0x1
.line 2
if-ne p1, p0, :cond_0
.line 3
.line 4
return v0
.line 5
:cond_0
instance-of v1, p1, Lokhttp3/internal/tls/BasicCertificateChainCleaner;
.line 6
.line 7
if-eqz v1, :cond_1
.line 8
.line 9
check-cast p1, Lokhttp3/internal/tls/BasicCertificateChainCleaner;
.line 10
.line 11
iget-object p1, p1, Lokhttp3/internal/tls/BasicCertificateChainCleaner;->a:Lokhttp3/internal/tls/TrustRootIndex;
.line 12
.line 13
iget-object v1, p0, Lokhttp3/internal/tls/BasicCertificateChainCleaner;->a:Lokhttp3/internal/tls/TrustRootIndex;
.line 14
.line 15
invoke-static {p1, v1}, Lkotlin/jvm/internal/Intrinsics;->areEqual(Ljava/lang/Object;Ljava/lang/Object;)Z
.line 16
.line 17
.line 18
move-result p1
.line 19
if-eqz p1, :cond_1
.line 20
.line 21
return v0
.line 22
:cond_1
const/4 p1, 0x0
.line 23
return p1
.end method
.method public final hashCode()I
.locals 1
.line 1
iget-object v0, p0, Lokhttp3/internal/tls/BasicCertificateChainCleaner;->a:Lokhttp3/internal/tls/TrustRootIndex;
.line 2
.line 3
invoke-virtual {v0}, Ljava/lang/Object;->hashCode()I
.line 4
.line 5
.line 6
move-result v0
.line 7
return v0
.end method