external: Update stoken to v0.81

This allows us to drop tomcrypt and link against nettle instead.

Signed-off-by: Kevin Cernekee <cernekee@gmail.com>
external: Update openconnect to v7.02+

This also provides the run_pie binary for running curl on ICS, bumps NDK
to r10d, gets rid of the GCCVER override, and pulls in the latest GnuTLS.

Signed-off-by: Kevin Cernekee <cernekee@gmail.com>
OpenConnectManagementThread: Use new Java API to get peer cert

getCertSHA1() has been replaced by getPeerCertHash().

Signed-off-by: Kevin Cernekee <cernekee@gmail.com>
Don't store prebuilt binaries in git

These are getting updated too often and bloating the repo.

Signed-off-by: Kevin Cernekee <cernekee@gmail.com>
Add .gitignore files for binaries under libs/ and assets/raw/

Signed-off-by: Kevin Cernekee <cernekee@gmail.com>
travis: Update to use NDK r10d; don't delete jar/so files

Signed-off-by: Kevin Cernekee <cernekee@gmail.com>
external: Build curl binary with -pie

We will use the run_pie helper from Chromium/OpenConnect to execute it
on ICS.  JB+ can run PIE binaries without a helper.

Signed-off-by: Kevin Cernekee <cernekee@gmail.com>
OpenConnectManagementThread: Use run_pie to wrap curl on ICS

Now that curl is a PIE binary, it won't run as-is on ICS.  Before
connecting, write out a wrapper script that either invokes curl-bin
(a PIE ELF binary) directly, or uses run_pie to execute it via dlopen().

fixes #1

Signed-off-by: Kevin Cernekee <cernekee@gmail.com>
Update changelog and bump version to 1.10-beta1 (1101)

Signed-off-by: Kevin Cernekee <cernekee@gmail.com>
external: Use -fPIE when linking

The gcc info page says:

    For predictable results, you must also specify the same set of
    options that were used to generate code (-fpie, -fPIE, or model
    suboptions) when you specify this option [-pie].

The output binary is exactly the same before and after making this change,
but it's probably a good idea to follow the rules anyhow.

Signed-off-by: Kevin Cernekee <cernekee@gmail.com>