search

datatheorem / TrustKit

Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.
MIT License
2.02k stars 362 forks source link

iOS - Get Public Key And Public Key Backup #184

Closed CodeTeamLabs closed 5 years ago

CodeTeamLabs commented 5 years ago

Excuse Me ... I should use TrustKit but I need of Help... How to use script for python get_pin_from_certificate.py --type DER ca.der ? From Terminal?

Another question is Backup Key ... you can make a backup key ... I tried to create it but ask me for information I do not understand when creating the .cert

If through open ssl I get a key from google.com how do I create the backup key for google.com in case the first one does not work for some reason?

Can you give me a concrete example to get the backup key and explain to me if the backup key must be a sort of "second key" of google? I'm making a lot of confusion and I do not understand how to overcome this obstacle ...

nabla-c0d3 commented 5 years ago

There is an explanation regarding the backup pin at https://stackoverflow.com/questions/36744697/how-to-get-a-backup-pin-for-trustkit-frameworks-ssl-pinning-under-ios . You should not pin domains where you do not own the certificate (such as www.google.com).