search

datatheorem / TrustKit-Android

Easy SSL pinning validation and reporting for Android.
MIT License
583 stars 87 forks source link

Volley and Truskit blocking other domains #92

Open ben-j69 opened 3 years ago

ben-j69 commented 3 years ago

Hello,

I have implemented certificate pinning with Trustkit, Volley and the config file network_security_config.xml, which look like :

<network-security-config>
    <domain-config>
        <domain includeSubdomains="true">preprod.com</domain>
        <pin-set expiration="2050-12-12">
            <pin digest="SHA-256">AAAAAAAAAAAAA</pin>
            <pin digest="SHA-256">BBBBBBBBBBBBB</pin>
        </pin-set>
        <trustkit-config enforcePinning="true"/>
    </domain-config>
    <domain-config>
        <domain includeSubdomains="true">prod.com</domain>
        <pin-set expiration="2050-12-12">
            <pin digest="SHA-256">CCCCCCCCCCCC</pin>
            <pin digest="SHA-256">DDDDDDDDDDDD</pin>
        </pin-set>
        <trustkit-config enforcePinning="true"/>
    </domain-config>
</network-security-config>

It is working perfectly when I am calling urls like .prod.com/ or .preprod.com/ but when I want to call another domain it is blocking everything. Is there a way to fix the configuration ?

Thanks