Skip to content

Conversation

@AaronAtDuo
Copy link
Contributor

…rmat Java accepts for pinning

Description

Java pinning relies on the public key hashes, not the full cert. Replaces the certs with the hashes.
Fixes #47

Motivation and Context

Get cert pinning working again

How Has This Been Tested?

Ran a full user auth through the example

Types of Changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)

@AaronAtDuo AaronAtDuo enabled auto-merge (squash) May 1, 2025 15:28
Copy link
Contributor

@jeffreyparker jeffreyparker left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Confirmed hashes all match expected values.

@AaronAtDuo AaronAtDuo merged commit 645bcd7 into main May 1, 2025
4 checks passed
@AaronAtDuo AaronAtDuo deleted the replace_certs_with_pubkey_hashes branch May 1, 2025 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Certificate pinning broken on 1.3.0?

2 participants