title: How to determine which dependency causes Google Play OpenSSL warning?
body: <p>I'm currently working on a big legacy project and trying to fix the OpenSSL vulnerability issue as explained at <a href="http://support.google.com/faqs/answer/6376725" rel="nofollow noreferrer">How to address OpenSSL vulnerabilities in your apps</a>.</p>
  
  <p>The problem is, there are lot of dependencies, some are open source (I updated all that didn't break the compatibility) added as Gradle import, some are custom/closed source provided by partners and contractors of the company I work for and attached to the project as JARs.</p>
  
  <p>Is there any way to pinpoint specific library that has this vulnerability? I used the bash script provided at <a href="https://stackoverflow.com/a/24295803/3734457">Google Play and OpenSSL warning message</a> and it points to one native dependency (actually the .so file). Is there any option to pinpoint actual dependency from there?</p>