Releases?

[babisRoutis]

Are there any plans for publishing releases to maven central?

[JesusMcCloud]

While proper releases of this library would be preferable, we've incorporated the PKI part into WARDEN/WARDEN-roboto (both of which are on maven central) as a stop-gap solution. While you won't get the flashy new parser, we are working towards full support for that too.

[babisRoutis]

While proper releases of this library would be preferable, we've incorporated the PKI part into WARDEN/WARDEN-roboto (both of which are on maven central) as a stop-gap solution. While you won't get the flashy new parser, we are working towards full support for that too.

Dear @JesusMcCloud
Thank you for your reply. Roboto is under my radar 😄

[JesusMcCloud]

@babisRoutis KMP client code integrated with server-side validation just dropped: https://github.com/a-sit-plus/warden-supreme

[babisRoutis]

@babisRoutis KMP client code integrated with server-side validation just dropped: https://github.com/a-sit-plus/warden-supreme

Hi @JesusMcCloud
Thanks for this

FYI here

[sethmoo]

There are still a few features we're working on before we stamp a release.

The primary is a "quirks mode". In this mode, the verifier will allow for certain variances from the "ideal" certification chain. This is for clients that need to accept older devices that predate our more rigid key attestation verification tests that OEMs must adhere to (since Android 13).

@suzannajiwani is working on the quirks mode, and I think we'll be ready to publish a release along with a maven package after that lands.