wolfssl (5.8.2) UNRELEASED; urgency=medium

  * Initial Debian packaging: wrapper that fetches wolfSSL v5.8.2-stable and
    builds it with the JNI-enabled configuration art_standalone's libcore
    expects, as a drop-in replacement for Debian's wolfSSL.
  * Build wolfssljni (v1.15.0-stable) here too, shipping the JSSE provider as a
    new wolfssljni binary package (libwolfssljni.so glue + the dexed
    wolfssljni-hostdex.jar boot-classpath jar). v1.15.0 is the most recent
    release whose Java has no lambdas or method references, so it dexes without
    invokedynamic (which the standalone ART cannot execute). Carry two patches:
    the getPrivateKey KeyStore null-check (added upstream later), and a lazy
    default-init in engineGetClientSessionContext so querying the client session
    context before SSLContext.init() does not throw (restores ATL's vendored
    behaviour; the uncaught NPE otherwise terminated the app process).
    Configure wolfSSL with the feature set --enable-jni implies (drop the
    --disable-opensslall/extra overrides). These pieces move out of
    art-standalone's vendored tree.

 -- Liberux Labs, S. L. <info@liberux.net>  Sat, 13 Jun 2026 12:00:00 +0000
