certificatepinner | Swift implementation of certificate pinning | TLS library

by nicwise Swift Version: Current License: MIT

X-Ray Key Features Code Snippets Community Discussions(8)Vulnerabilities Install Support

kandi X-RAY | certificatepinner Summary

certificatepinner is a Swift library typically used in Security, TLS applications. certificatepinner has no bugs, it has no vulnerabilities, it has a Permissive License and it has low support. You can download it from GitHub.

Have a look at the GitHub certificate information - click on the lock. You should see three (or more) levels of certificates.

Support

Quality

Security

License

Reuse

Support

certificatepinner has a low active ecosystem.

It has 26 star(s) with 3 fork(s). There are 5 watchers for this library.

It had no major release in the last 6 months.

There are 1 open issues and 1 have been closed. On average issues are closed in 604 days. There are 3 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of certificatepinner is current.

Quality

certificatepinner has 0 bugs and 0 code smells.

Security

certificatepinner has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

certificatepinner code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

certificatepinner is licensed under the MIT License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

certificatepinner releases are not available. You will need to build from source code and install.

Installation instructions, examples and code snippets are available.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of certificatepinner

Get all kandi verified functions for this library.

certificatepinner Key Features

No Key Features are available at this moment for certificatepinner.

certificatepinner Examples and Code Snippets

No Code Snippets are available at this moment for certificatepinner.

Community Discussions

Trending Discussions on certificatepinner

Retrofit, OkHttp3 and Spring occasional error The request was rejected because the URL contained a potentially malicious String ";"

Is it necessary to store SPKI hash securely in android?

OkHttp certificatePinner seems not working

CertPathValidatorException: Trust anchor for certification path not found. in android after update gradle and gradle plugin

Alamofire 5 alternative to sessionDidReceiveChallenge

Enabling HTTPS communication between my server and my client

OkHttp for Android: Option to NOT enforce Certificate/ public key pinning

Frida, hook OKHttp Library does not work with examples

QUESTION

Retrofit, OkHttp3 and Spring occasional error The request was rejected because the URL contained a potentially malicious String ";"

Asked 2021-Sep-29 at 13:38

we are having a network error, and are not sure what could be causing it. We upload data from an Android app, and most of the time it works great.

Data are sent with Retrofit and OKHttp3 using an interface:

...

ANSWER

Answered 2021-Sep-29 at 13:38

It appears that the problem is resolved by simply updating Retrofit to 2.9.0 and OkHttp3 to 4.9.1.

Source https://stackoverflow.com/questions/69307548

QUESTION

Is it necessary to store SPKI hash securely in android?

Asked 2021-Mar-06 at 13:19

I'm trying to enable public key pinning since I don't want to release updates for every certificate renewal provided I'll use the same CSR every time.

I generated the hash with this script.

...

ANSWER

Answered 2021-Mar-06 at 13:19

It's not a secret, you can store the certificate pin freely. But most advice is against using Certificate Pinning unless you know what you are doing and what your security team certificate policy is. Getting it from a live server is asking for trouble for when they rotate certificates or switch to backups.

Source https://stackoverflow.com/questions/66502716

QUESTION

OkHttp certificatePinner seems not working

Asked 2021-Mar-02 at 19:25

i need some help,

im trying to implement SSLPinning on my react-native application (v0.63).

im already follow the documentation on OkHttp github page

here is code i make for my application :

...

ANSWER

Answered 2021-Mar-02 at 19:25

CertificatePinner will only restrict traffic for the host BuildConfig.HOSTNAME, all other hosts will be let through. This is why your CertificatePinner isn't blocking anything.

You can create a custom network interceptor to reject all other traffic. See https://square.github.io/okhttp/interceptors/

n.b. for future you could implement a EventListener and print out the hosts you are connecting to and the pin from the certificate chain to help debug this.

See https://stackoverflow.com/a/66398516/1542667

Source https://stackoverflow.com/questions/66416779

QUESTION

CertPathValidatorException: Trust anchor for certification path not found. in android after update gradle and gradle plugin

Asked 2020-Oct-29 at 19:41

I try to check SSL, by this code (and work successfully):

...

ANSWER

Answered 2020-Oct-28 at 10:57

This would mean that certificate is issued for www.example.com , and thus can not be trusted for whatever.example.com - this server need proper signed certificate

Source https://stackoverflow.com/questions/64571266

QUESTION

Alamofire 5 alternative to sessionDidReceiveChallenge

Asked 2020-Jun-09 at 13:01

I have just shifted to Alamofire 5.

Earlier I used URLSession and Certificate Pinner and to handle auth challenge I used delegate method of URLSessionDelegate with hash values

...

ANSWER

Answered 2020-Jun-04 at 21:52

If you want to pin with public keys you need to provide the certificates from which to parse those public keys in the bundle of your app, or otherwise provide them to PublicKeysTrustEvaluator.

Source https://stackoverflow.com/questions/62194554

QUESTION

Enabling HTTPS communication between my server and my client

Asked 2020-Apr-20 at 07:10

I have already built a server app and an android app. So far they were communicating over http, but I am sending sensitive information in each request (like JWT). Therefore I neet to use Https instead.

I have generated a p12 certificate.

On the server side:

I've copied the certificate to resources/keystore/sampleName.p12
I've added these lines to my application.properties
...

ANSWER

Answered 2020-Apr-20 at 07:10

CertificatePinning is in addition to the normal certificate checks. It only further restricts the choice of certificate, since be default you will accept any cert for your host.

See Adding a custom certificate to an OkHttp Client for an existing answer.

Or read up here

https://github.com/square/okhttp/blob/master/samples/guide/src/main/java/okhttp3/recipes/CustomTrust.java

https://square.github.io/okhttp/4.x/okhttp/okhttp3/-certificate-pinner/

Source https://stackoverflow.com/questions/61302017

QUESTION

OkHttp for Android: Option to NOT enforce Certificate/ public key pinning

Asked 2020-Apr-10 at 06:59

I am using Okhttp + Retrofit for networking in my SDK. I have a requirement to implement Certificate pinning but not enforce it. We just need to get the failure reports for pinning failure and would like the request to go through for now during the monitoring period.

TrustKit is another Certificate pinning library which provides this option to set enforce = false. With this, the request itself wouldn't fail but we can get the failure reports.

I do not see a way to achieve similar behavior using the Okhttp CertificatePinner. OkHttp would always fail the request with an exception if the Certificate pinning fails.

Do you have any suggestions on how I can achieve this behavior using the existing functionality?

Would have been easier if we could extend CertificatePinner class and override check() ?

Thanks in advance.

...

ANSWER

Answered 2020-Apr-10 at 06:59

Derived somewhat from you own answer on the issue tracker

Source https://stackoverflow.com/questions/61130457

QUESTION

Frida, hook OKHttp Library does not work with examples

Asked 2020-Feb-19 at 09:30

I'm trying to hook functions of the OKHttp library by using then following Frida script:

...

ANSWER

Answered 2020-Feb-19 at 09:30

You should either:

Source https://stackoverflow.com/questions/60279273

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install certificatepinner

You need to setup the pinner with one or more hashes, and (if you want to validate it) the source domain name.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: