Questions tagged [sslpinning]

44 questions
0
votes
0 answers

SSL Pinning process break in Ionic application

we have developed Ionic app, in that SSL pinning using advancedHttpPlugin but still, the security team was able to use a third party tool Burp Suite to install a CA in the mobile and track the application, they provided below message for fixing the…
Laxman
  • 307
  • 1
  • 4
  • 14
0
votes
2 answers

How to Detect Root (Magisk) and Implement SSL Pinning on Android / React Native

I'm working on react native project that require SSL Pinning and Root Detection to be implemented, i've tried using the SSL pinner factory in okhttp method and android security config method for the SSL Pinning, as for the root detection i've tried…
0
votes
0 answers

React Native Public Key Pinning with HEROKU

I read all kind of posts and articles about ssl pinning in react native. However all of those are about a privately owned domain for which we generate the certificate. But if my API is hosted on Heroku, how can I manage SSL pinning? Ideally, I would…
Gigalink
  • 170
  • 8
0
votes
1 answer

Implementing SSL Pinning with Flutter GraphQL

I need help implementing SSL pinning on Flutter using graphql_flutter and http_certificate_pinning. Here's my code implementation so far: import 'package:graphql_flutter/graphql_flutter.dart'; import…
0
votes
1 answer

Why is ssl pinning not working on synchronous requests?

I want to do ssl pinning with Alamofire library, but it doesn't work for sync requests. I am using the following library to sync Alamofire request: https://github.com/Dalodd/Alamofire-Synchronous In async call I get cancaled with code -999 but when…
OMANSAK
  • 1,066
  • 1
  • 12
  • 30
0
votes
1 answer

Certificate Pinning not working when trust user certificates in network security configuration

I am learning network security configuration in Android. Here is my configuration file
0
votes
1 answer

ios swift Dynamically update SSL Certificate(.cer) files

Dynamically need to update. I'm able to download the certificate from a URL and save it to the document directory. func downloadFile(url: URL, completion: @escaping (String?, Error?) -> Void) { let documentsUrl = FileManager.default.urls(for:…
Ramprasath Selvam
  • 3,868
  • 3
  • 25
  • 41
0
votes
0 answers

Is intercepting app HTTPS traffic possible on apps that use SSLpinning and safetynet

I'm wondering if it is still possible these days to proxy/spoof traffic on secured apps for example the Mcdonald's app. I use this example because it's a well known app with a lot of securities in place: Safetynet checks Root checks Certificate…
Niya
  • 61
  • 6
0
votes
1 answer

SSL pinning with Azure App gateway + APIM

Is there a way of achieving SSL pinning with Azure Application Gateway. I have some APIs deployed on AKS exposed through APIM. The APIM is private and the APIs are publicly exposed through Application Gateway. Is there a way of achieving SSL pinning…
0
votes
1 answer

ssl-pinning right approach for android and IOS application

We are using Cloudflare as our edge. We have the requirement for SSL pining. could any suggest the best way to manage SSL pining [ Dynamic cert approach ] .
0
votes
0 answers

java.io.IOException: stream does not represent a PKCS12 key store

I am trying to apply certificate pinning in android from internal storage of the application. I have a certificate with .pfx file extension. It works fine when I try to read the file from bundle raw folder but when I try to read it from internal…
Ahmad Ayyaz
  • 774
  • 8
  • 25
0
votes
0 answers

SSL Pinning on iOS for Ionic Angular Application

I have a problem with SSL Pinning on iOS. I was using the following plugin: https://github.com/silkimen/cordova-plugin-advanced-http and https://ionicframework.com/docs/native/http This method is working fine for Android. However, with iOS, I am…
0
votes
0 answers

Is there any library available to read the SSL Certificate information in Angular?

I'm working on SSL Pinning for Web API(URL) used in my angular application. I came through some npm modules (such as ssl-information, ssl-checker) to fetch SSL information But these npm modules are based on node environment.. not working in angular…
Muthuraja
  • 551
  • 5
  • 13
-2
votes
1 answer

iOS Alamofire SSL Pinning with both certificate about to expire and a new certificate

My application implements SSLPining with leaf certificate. And it's about to expire. I researched and got the answer: Some time before the certificate expires, release a new version of your app with a replacement cert in the pin list, as well as…
Nguyen Hoan
  • 1,583
  • 1
  • 11
  • 18
1 2
3