TrustKit-Android
TrustKit-Android copied to clipboard
Enforce pinning not respected in Android 5.0
Describe the bug When using the TrustKit on 5.0 device, I am getting javax.net.ssl.SSLHandshakeException: Certificate validation failed for ... When checking the log, it has correct parameters: E/CERT ERROR: "include-subdomains": false, E/CERT ERROR: "enforce-pinning": false, E/CERT ERROR: "validation-result": 2,
These are respected on Android 8.0 The CERT ERROR: "validated-certificate-chain": contains the correct certificate, that is in the xml file and served-certificate-chain": are also same. known-pins are also correct.
To Reproduce I can only reproduce on the 5.0 device, works correctly in emulator I am not including the domain, because it is accessible only on private network
Expected behavior It shouldn't fail and if it fails, it shouldn't block the traffic with enforce-pinning set to false (works well on other devices)
TrustKit configuration
App details:
- App target SDK: 28
- App language:Java
- Android version to reproduce the bug: 5.0