Questions tagged [pinning]

Pinning is the process of associating a host with their expected X509 certificate or public key.

Pinning is the process of associating a host with their expected X509 certificate or public key.

Once a certificate or public key is known or seen for a host, the certificate or public key is associated or 'pinned' to the host. If more than one certificate or public key is acceptable, then the program holds a pinset. In this case, the advertised identity must match one of the elements in the pinset.

Owasp pinning cheatsheet

179 questions
119
votes
9 answers

How to Export Certificate from Chrome on a Mac?

How do I export a security certificate from Chrome v37 on a Mac? Previously I could click on the little lock icon next to the URL, select "Connection," select the certificate, and an "Export" button would appear. Not so anymore!
kmiklas
  • 13,085
  • 22
  • 67
  • 103
71
votes
4 answers

How do I get public key hash for SSL pinning?

How would I get the hash of a public certificate's info to be able to perform SSL Pinning in my application? I am using TrustKit in my iOS application and it is asking for me to set the hash that I am expecting. Where can I get this from?
mylogon
  • 2,772
  • 2
  • 28
  • 42
30
votes
3 answers

SSL Pinning and certificate expiry

This question relates to the use of SSL Pinning in a client app against a web api and certificate expiry. Scenario: I own example.com and have a subdomain where an api is hosted, as such: api.example.com I wish to use the api over SSL, so an SSL…
Chris
  • 2,739
  • 4
  • 29
  • 57
25
votes
3 answers

In visual studio 2010 what is/how to set the hotkey to pin and unpin an active pane?

I often run tests and need the test-result pane to be pinned. In other time, I mostly work with writting codes and compile - I prefer to have the output pane (which shared the same space with test-result pane) automatically viewed while compiling…
Nam G VU
  • 33,193
  • 69
  • 233
  • 372
22
votes
1 answer

Accessing string resources inside network-security-config

Is it possible to use string resources inside android:networkSecurityConfig defined in AndroidManifest.xml? I have a config file like this:
Michał Pierzchała
  • 1,762
  • 1
  • 15
  • 20
22
votes
2 answers

How to disable Toast Messages generated in Screen Pinning?

i'm developing lockscreen application, and i want to disable home button, my app is - Device Owner and Device Administrator now i'm usnig screen pinning for disable home button. but if i started activity each time i get msg "Screen pinned" and on…
Sangha_development
  • 253
  • 1
  • 4
  • 9
19
votes
3 answers

ssl pinning in Swift AlamoFire

Im a newb here but I have an app that is subject to MITM attacks. After I bit of research it sounds like I need to do SSL Pining, i.e keep a copy of my servers public key/certificate so the can determine if the response came from it. I have no idea…
user3412996
  • 191
  • 1
  • 1
  • 4
18
votes
7 answers

iOS certificate pinning with Swift and NSURLSession

Howto add certificate pinning to a NSURLSession in Swift? The OWASP website contains only an example for Objective-C and NSURLConnection.
lifeisfoo
  • 15,478
  • 6
  • 74
  • 115
17
votes
2 answers

Dynamic certificate pinning

I have an iOS application that will be distributed to multiple customers, each using their own network infrastructure. I would like to add some certificate pinning capabilities, but I need to do it in a dynamic fashion since I cannot ship the app…
mgv
  • 8,384
  • 3
  • 43
  • 47
17
votes
5 answers

SSL Pinning with Volley network library on Android

I want to use SSL Pinning in volley network library. Is there any way to implement SSL pinning with volley? Does volley provide this support for security improvements?
KAPLANDROID
  • 1,099
  • 1
  • 12
  • 23
15
votes
1 answer

ag-grid Group Column Pinned

I struggled with pinning a group column left and I wanted to share my solution with the world. Refer to the autoGroupColumnDef section. Hope this helps! var columnDefs = [ { headerName: "Console", field: "console", width: 140, rowGroup: true}, …
GoingPostal
  • 151
  • 1
  • 4
13
votes
3 answers

Certificate pinning in Alamofire

I am creating an iPad app that accesses HTTPS web services. I want to implement pinning, but am having issues. This class creates the Alamofire Manager (mostly taken from documentation): class NetworkManager { var manager: Manager? init()…
Mark Tickner
  • 1,023
  • 2
  • 15
  • 26
12
votes
6 answers

Pinning an updateble struct before passing to unmanaged code?

I using some old API and need to pass the a pointer of a struct to unmanaged code that runs asynchronous. In other words, after i passing the struct pointer to the unmanaged code, the unmanaged code copies the pointer and returns immediately. The…
DxCK
  • 4,402
  • 7
  • 50
  • 89
9
votes
2 answers

Pinned Instances for GC - Not traceable from my managed code

So I am using WPF 3.5 with MVVM + DataTemplate method to load 2 views on the GUI. I have observed while memory profiling that items generated as part of items container of items controls are pinned into the memory and doesn't get GCed even after the…
WPF-it
  • 19,625
  • 8
  • 55
  • 71
9
votes
0 answers

Is this android SSL pinning implementation correct and why is this error showing up in the logcat?

I am getting this error in my logcat. I have implemented ssl pinning in my android application. I think I have done something wrong which is causing this error. 05-19 17:39:54.998: E/NativeCrypto(30908): ssl=0x5eefaf80 cert_verify_callback…
nsp
  • 378
  • 1
  • 4
  • 19
1
2 3
11 12