TrustKit-Android icon indicating copy to clipboard operation
TrustKit-Android copied to clipboard

Easy SSL pinning validation and reporting for Android.

Results 33 TrustKit-Android issues
Sort by recently updated
recently updated
newest added

Some APIs used by TrustKit have been deprecated in Android Q: * android.preference (https://developer.android.com/reference/android/preference/Preference): the replacement is androidx.preference (https://developer.android.com/reference/androidx/preference/package-summary.html). * Junit is deprecated: we need to switch AndroidxJunit instead. *...

enhancement
to-release

Hello! **Describe the bug** I'm seeing one crash in Google play console: ``` java.lang.IllegalArgumentException: at com.datatheorem.android.trustkit.config.TrustKitConfiguration.getPolicyForHostname (TrustKitConfiguration.java:90) at com.datatheorem.android.trustkit.pinning.TrustManagerBuilder.getTrustManager (TrustManagerBuilder.java:67) at com.datatheorem.android.trustkit.TrustKit.getTrustManager (TrustKit.java:390) ``` https://github.com/datatheorem/TrustKit-Android/blob/master/trustkit/src/main/java/com/datatheorem/android/trustkit/config/TrustKitConfiguration.java#L91 **To Reproduce** Unfortunately I cannot...

I performed all the steps in the documentation. I received a CA certificate for the application and included it in the application with custom SSLSocketFactory. However, I always get this...

bug

Whenever i try to do `MITM` attack, the ChainValidation Fail and exception is thrown without sending any report to the server `dataTheorem`, although with `wrong pinning key` and no `MITM`...

under investigation

**Describe the bug** I've used the documentation https://github.com/datatheorem/TrustKit-Android/blob/master/docs/getting-started.md#adding-trustkit-as-a-dependency for integrating TrustKit into a Flutter app with Kotlin. When trying to initialize TrustKit with the Pinning Policy (https://github.com/datatheorem/TrustKit-Android/blob/master/docs/getting-started.md#initializing-trustkit-with-the-pinning-policy) I can only...

Currently, I configure pin sets in the network security config file using TrustKit. However, I'd like to avoid storing these pins in the file to enhance security. Is there a...

Is it possible to use [string resources][1] inside `android:networkSecurityConfig` defined in AndroidManifest.xml? I have a config file like this: mydomain.com @string/pin @string/pin_fallback but my app doesn't seem to detect resources...

**Describe the bug** I have added the wrong public key in network_security_config file, still the API request is working fine. I am using Volley for network request. ` HurlStack sslHurlStack...