{"id":1626,"date":"2023-03-25T21:09:47","date_gmt":"2023-03-25T13:09:47","guid":{"rendered":"https:\/\/www.appblog.cn\/?p=1626"},"modified":"2023-04-23T22:03:18","modified_gmt":"2023-04-23T14:03:18","slug":"android-ssl-pinning-preventing-man-in-the-middle-attacks","status":"publish","type":"post","link":"https:\/\/www.appblog.cn\/index.php\/2023\/03\/25\/android-ssl-pinning-preventing-man-in-the-middle-attacks\/","title":{"rendered":"Android SSL Pinning(\u9632\u6b62\u4e2d\u95f4\u4eba\u653b\u51fb)"},"content":{"rendered":"

\u4e3a\u4e86\u9632\u6b62\u4e2d\u95f4\u4eba\u653b\u51fb\uff0c\u6211\u4eec\u9700\u8981\u8bc1\u4e66\u56fa\u5b9a\u6280\u672f<\/strong><\/p>\n

Android\uff1ahttps:\/\/developer.android.com\/training\/articles\/security-ssl.html#Pinning<\/a>
\nOKHttp CertificatePinner: https:\/\/square.github.io\/okhttp\/3.x\/okhttp\/okhttp3\/CertificatePinner.html<\/a>
\nOKHttp Certificate Pinning: https:\/\/square.github.io\/okhttp\/https\/#certificate-pinning-kt-java<\/a><\/p>\n

<\/p>\n

\u901a\u8fc7\u8bc1\u4e66\u56fa\u5b9a\u7684\u6280\u672f\uff0c\u5e94\u7528\u53ef\u4ee5\u66f4\u597d\u5730\u4fdd\u62a4\u81ea\u5df1\u514d\u53d7\u4ee5\u6b3a\u8bc8\u65b9\u5f0f\u53d1\u653e\u7684\u8bc1\u4e66\u7684\u653b\u51fb\u3002<\/p>\n

\u5728OKhttp\u4e2d\u5b9e\u73b0SSL Pinning\u662f\u5341\u5206\u7b80\u5355\u7684<\/p>\n

public final class CertificatePinning {\n  private final OkHttpClient client = new OkHttpClient.Builder()\n      .certificatePinner(\n          new CertificatePinner.Builder()\n              .add("publicobject.com", "sha256\/Vjs8r4z+80wjNcr1YKepWQboSIRi63WsWXhIMN+eWys=")\n              .build())\n      .build();\n\n  public void run() throws Exception {\n    Request request = new Request.Builder()\n        .url("https:\/\/publicobject.com\/robots.txt")\n        .build();\n\n    try (Response response = client.newCall(request).execute()) {\n      if (!response.isSuccessful()) throw new IOException("Unexpected code " + response);\n\n      for (Certificate certificate : response.handshake().peerCertificates()) {\n        System.out.println(CertificatePinner.pin(certificate));\n      }\n    }\n  }\n\n  public static void main(String... args) throws Exception {\n    new CertificatePinning().run();\n  }\n}<\/code><\/pre>\n
\u53e6\u5916\u4eceAndroid 24\u8d77\uff0c\u652f\u6301SSL Pinning\u662f\u4e00\u4ef6\u5341\u5206\u7b80\u5355\u7684\u4e8b\u60c5\uff0c\u5728AndroidManifest.xml file<\/code>\u4e2d\u6307\u5b9a`configuration file<\/p>\n
<application\n    android:networkSecurityConfig="@xml\/network_security_config"\n    >\n<\/application><\/code><\/pre>\n
<?xml version="1.0" encoding="utf-8"?>\n<network-security-config>\n    <domain-config>\n        <domain includeSubdomains="true">appmattus.com<\/domain>\n        <pin-set>\n            <pin digest="SHA-256">4hw5tz+scE+TW+mlai5YipDfFWn1dqvfLG+nU7tq1V8=<\/pin>\n            <pin digest="SHA-256">YLh1dUR9y6Kja30RrAn7JKnbQG\/uEtLMkBgFF2Fuihg=<\/pin>\n        <\/pin-set>\n    <\/domain-config>\n<\/network-security-config><\/code><\/pre>\n
\u66f4\u591a\u96c6\u6210\u65b9\u5f0f\uff08Retrofit \/ Picasso \/ Volley\uff09\u8bf7\u53c2\u8003\uff1aAndroid Security: SSL Pinning<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
\u4e3a\u4e86\u9632\u6b62\u4e2d\u95f4\u4eba\u653b\u51fb\uff0c\u6211\u4eec\u9700\u8981\u8bc1\u4e66\u56fa\u5b9a\u6280\u672f Android\uff1ahttps:\/\/developer.android. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[311],"tags":[373],"class_list":["post-1626","post","type-post","status-publish","format-standard","hentry","category-android-advance","tag-ssl-pinning"],"_links":{"self":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/posts\/1626","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/comments?post=1626"}],"version-history":[{"count":0,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/posts\/1626\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/media?parent=1626"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/categories?post=1626"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/tags?post=1626"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}