Update aws-c-io to v0.23.1, aws-lc to v1.61.4, s2n-tls to v1.5.27 (#203)

WillChilds-Klein · web-flow · commit b80d0b178a36 · 2025-10-20T10:23:08.000-07:00
diff --git a/aws-crt-kotlin/api/aws-crt-kotlin.api b/aws-crt-kotlin/api/aws-crt-kotlin.api
@@ -822,6 +822,7 @@ public final class aws/sdk/kotlin/crt/io/TlsCipherPreference : java/lang/Enum {
 	public static final field PQ_DEFAULT Laws/sdk/kotlin/crt/io/TlsCipherPreference;
 	public static final field PQ_TLSV1_2_2024_10 Laws/sdk/kotlin/crt/io/TlsCipherPreference;
 	public static final field SYSTEM_DEFAULT Laws/sdk/kotlin/crt/io/TlsCipherPreference;
+	public static final field TLSV1_0_2023_06 Laws/sdk/kotlin/crt/io/TlsCipherPreference;
 	public static fun getEntries ()Lkotlin/enums/EnumEntries;
 	public final fun getValue ()I
 	public final fun isSupported ()Z
diff --git a/aws-crt-kotlin/common/src/aws/sdk/kotlin/crt/io/TlsCipherPreference.kt b/aws-crt-kotlin/common/src/aws/sdk/kotlin/crt/io/TlsCipherPreference.kt
@@ -30,6 +30,12 @@ public enum class TlsCipherPreference(public val value: Int) {
      */
     PQ_DEFAULT(8),
 
+    /**
+     * This security policy was the system default before PQ was enabled by default, specifically
+     * aws-c-io's AWS_IO_TLS_CIPHER_PREF_TLSV1_0_2023_06.
+     */
+    TLSV1_0_2023_06(10),
+
     ;
 
     /**
diff --git a/aws-crt-kotlin/jvm/src/aws/sdk/kotlin/crt/io/TlsContextJVM.kt b/aws-crt-kotlin/jvm/src/aws/sdk/kotlin/crt/io/TlsContextJVM.kt
@@ -29,6 +29,7 @@ internal actual fun isAlpnSupported(): Boolean = TlsContextOptionsJni.isAlpnSupp
 
 private fun TlsCipherPreference.into(): TlsCipherPreferenceJni = when (this) {
     TlsCipherPreference.SYSTEM_DEFAULT -> TlsCipherPreferenceJni.TLS_CIPHER_SYSTEM_DEFAULT
+    TlsCipherPreference.TLSV1_0_2023_06 -> TlsCipherPreferenceJni.TLS_CIPHER_PREF_TLSv1_0_2023
     TlsCipherPreference.PQ_TLSV1_2_2024_10 -> TlsCipherPreferenceJni.TLS_CIPHER_PREF_PQ_TLSv1_2_2023
     TlsCipherPreference.PQ_DEFAULT -> TlsCipherPreferenceJni.TLS_CIPHER_PQ_DEFAULT
 }
diff --git a/crt/aws-c-io b/crt/aws-c-io
@@ -1 +1 @@
-Subproject commit 8d7a201d50f932a56b9f52c173d10c39e55a32d0
+Subproject commit 8906a02cb204b0b01cd38c2c2d62d7312dbee50f
diff --git a/crt/aws-lc b/crt/aws-lc
@@ -1 +1 @@
-Subproject commit 2980c1ba66cba65162c9092e232858125e063ff4
+Subproject commit 8ca0b29b141bb8c7eae06ef324e2091d5648d819
diff --git a/crt/s2n b/crt/s2n
@@ -1 +1 @@
-Subproject commit 2d254b0c6d8ebe037730d23097f72a4cbc1f2218
+Subproject commit 30f40f2345a89570ed3c4cee2274942f1ebf85fa
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -4,7 +4,7 @@ kotlin-version = "2.2.0"
 aws-kotlin-repo-tools-version = "0.4.65"
 
 # libs
-crt-java-version = "0.38.1"
+crt-java-version = "0.39.3"
 coroutines-version = "1.10.2"
 binary-compatibility-validator-version = "0.18.0"
 

Original file line number	Diff line number	Diff line change
`@@ -29,6 +29,7 @@ internal actual fun isAlpnSupported(): Boolean = TlsContextOptionsJni.isAlpnSupp`
`29`	`29`
`30`	`30`	`private fun TlsCipherPreference.into(): TlsCipherPreferenceJni = when (this) {`
`31`	`31`	`TlsCipherPreference.SYSTEM_DEFAULT -> TlsCipherPreferenceJni.TLS_CIPHER_SYSTEM_DEFAULT`
	`32`	`+ TlsCipherPreference.TLSV1_0_2023_06 -> TlsCipherPreferenceJni.TLS_CIPHER_PREF_TLSv1_0_2023`
`32`	`33`	`TlsCipherPreference.PQ_TLSV1_2_2024_10 -> TlsCipherPreferenceJni.TLS_CIPHER_PREF_PQ_TLSv1_2_2023`
`33`	`34`	`TlsCipherPreference.PQ_DEFAULT -> TlsCipherPreferenceJni.TLS_CIPHER_PQ_DEFAULT`
`34`	`35`	`}`