From 47c1e86a4c98a149d8e9b2d503fe102ad3dda0f4 Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Tue, 19 Nov 2019 14:41:34 +0100
Subject: [PATCH] android: Add networkSecurityConfig to fetch CLRs/OCSP via
 HTTP

Android 9 restricts this to only HTTPS by default.

Fixes #3273.
---
 .../android/app/src/main/AndroidManifest.xml   |  1 +
 .../main/res/xml/network_security_config.xml   | 18 ++++++++++++++++++
 2 files changed, 19 insertions(+)
 create mode 100644 src/frontends/android/app/src/main/res/xml/network_security_config.xml

diff --git a/src/frontends/android/app/src/main/AndroidManifest.xml b/src/frontends/android/app/src/main/AndroidManifest.xml
index 35fe4ca3f7..2b2ddfcdd7 100644
--- a/src/frontends/android/app/src/main/AndroidManifest.xml
+++ b/src/frontends/android/app/src/main/AndroidManifest.xml
@@ -28,6 +28,7 @@
         android:icon="@mipmap/ic_launcher"
         android:label="@string/app_name"
         android:theme="@style/ApplicationTheme"
+        android:networkSecurityConfig="@xml/network_security_config"
         android:allowBackup="false" >
         <activity
             android:name=".ui.MainActivity"
diff --git a/src/frontends/android/app/src/main/res/xml/network_security_config.xml b/src/frontends/android/app/src/main/res/xml/network_security_config.xml
new file mode 100644
index 0000000000..7849170788
--- /dev/null
+++ b/src/frontends/android/app/src/main/res/xml/network_security_config.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+    Copyright (C) 2019 Tobias Brunner
+    HSR Hochschule fuer Technik Rapperswil
+
+    This program is free software; you can redistribute it and/or modify it
+    under the terms of the GNU General Public License as published by the
+    Free Software Foundation; either version 2 of the License, or (at your
+    option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
+
+    This program is distributed in the hope that it will be useful, but
+    WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
+    or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
+    for more details.
+-->
+<network-security-config>
+    <base-config cleartextTrafficPermitted="true" />
+</network-security-config>
-- 
2.47.2