Fuzion24 / JustTrustMe

An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
Other
4.82k stars 785 forks source link

The inner webview or Chrome get SSL Error With HTTPS #41

Closed yaochao closed 5 years ago

yaochao commented 6 years ago

When I visit a https url, I can't get it. But a http url. So I guess the webview hook are lose efficacy.

iamvicliu commented 5 years ago

me too

foundkey commented 5 years ago

Me to, if enable JustTrustMe Module, can't use inner webview access URL. Use Logcat can capture exception: Error creating trust manager (just.trust.me.Main$ImSureItsLegitTrustManager): java.lang.IllegalArgumentException

foundkey commented 5 years ago

Find "ImSureItsLegitTrustManager" class in Main.java, and add method:

public List<X509Certificate> checkServerTrusted(X509Certificate[] chain, String authType, String host) throws CertificateException { List<X509Certificate> list = new ArrayList<>(); return list; } rebuild and install, done.

yaochao commented 5 years ago

Good job.

yaochao commented 5 years ago

Find "ImSureItsLegitTrustManager" class in Main.java, and add method:

public List<X509Certificate> checkServerTrusted(X509Certificate[] chain, String authType, String host) throws CertificateException { List<X509Certificate> list = new ArrayList<>(); return list; } rebuild and install, done.

you can contribute this code, and pull requests it.

Fuzion24 commented 5 years ago

Fixed by #43