TrustKit-Android
TrustKit-Android copied to clipboard
Wrong public key not blocking the API request.
Describe the bug I have added the wrong public key in network_security_config file, still the API request is working fine. I am using Volley for network request.
`
HurlStack sslHurlStack = new HurlStack() {
@Override
protected HttpURLConnection createConnection(URL url) throws IOException {
HttpsURLConnection httpURLConnection = (HttpsURLConnection) super.createConnection(url);
try {
httpURLConnection.setSSLSocketFactory(TrustKit.getInstance().getSSLSocketFactory(url.getHost()));
} catch (Exception e) {
}
return httpURLConnection;
}
};
RequestQueue mRequestQueue = Volley.newRequestQueue(context, sslHurlStack);
`
Expected behavior The API request should fail when the Public key added in network_security_config is incorrect
App details:
- App target SDK: 32
- App language: Java
- Android version to reproduce the bug :12