Skip to content

Remove AESCrypt password in logs, and generate device's own SSL certificate for FTP server - #4719

Open
TranceLove wants to merge 6 commits into
TeamAmaze:hotfix/3.11.3from
TranceLove:bugfix/aescrypt-logging-ftps-keystore-password
Open

Remove AESCrypt password in logs, and generate device's own SSL certificate for FTP server#4719
TranceLove wants to merge 6 commits into
TeamAmaze:hotfix/3.11.3from
TranceLove:bugfix/aescrypt-logging-ftps-keystore-password

Conversation

@TranceLove

Copy link
Copy Markdown
Collaborator

Description

  • Removed log statement when encrypt/decrypt files with AESCrypt to prevent exposing passwords
  • Removed bundled SSL certificate in keystore, and instead use AndroidKeystore to generate private key and SSL certificate
  • Also added dialog box to display generated SSL certificate information for clients

Note: FTP clients will need to accept updated SSL certificates upon connection.

Android's own KeyGenParameterSpec was used at the first attempt to generate the private key in an even more secure way, but turned out it's not compatible with Apache ftpserver, hence resorted to the original simple and compatible way instead.

Automatic tests

  • Added unit tests for specific individual functions
  • Added headless tests for new app functionality
  • Added emulator tests for new UI elements

Manual tests

  • Done

  • Device: Fairphone 5

  • OS: Lineage OS 23 (16)

Build tasks success

Successfully running following tasks on local:

  • ./gradlew assembledebug
  • ./gradlew spotlessCheck

Generative code

  • This PR used generative code tools (GenAI, LLMs, etc.)

Github Copilot with GPT 5.4 mini was stepped in on deciding writing Espresso tests over Robolectric ones, as AndroidKeystore is used.

Also remove log statement in setPassword()
…tock prefab ones

Prevent abusing FTP server SSL certificate
…tock prefab ones

Prevent abusing FTP server SSL certificate
…tock prefab ones

Prevent abusing FTP server SSL certificate

Also provides dialog to display generated certificate information and copy to clipboard
@TranceLove
TranceLove force-pushed the bugfix/aescrypt-logging-ftps-keystore-password branch from 082c089 to 5982b99 Compare September 9, 2026 16:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant