Investigate Androind 9 (Pie) and Certificate Pinning #43

New issue

Closed

opened 2019-06-10 01:44:35 +02:00 by bmartin5692 · 2 comments

bmartin5692 commented

2019-06-10 01:44:35 +02:00

(Migrated from github.com)

@DENightOne reports the app doesn't work on Android 9 (Pie) possibly due to certificate pinning.

TODO: Setup Android Studio/Emulator and test.

This article may be worth reviewing:
Four Ways to Bypass Android SSL Verification and Certificate Pinning

@DENightOne reports the app doesn't work on Android 9 (Pie) possibly due to certificate pinning. TODO: Setup Android Studio/Emulator and test. This article may be worth reviewing: [Four Ways to Bypass Android SSL Verification and Certificate Pinning](https://blog.netspi.com/four-ways-bypass-android-ssl-verification-certificate-pinning/)

bmartin5692 commented

2019-10-03 14:27:28 +02:00

(Migrated from github.com)

@DENightOne - I haven't had the time to dig into this yet, however I made some changes to allow for the app to work on iOS13 which introduced some new certificate restrictions.

The changes were added in e873e22fd3 and conform to the requirements from apple at https://support.apple.com/en-us/HT210176

If you are still using Bumper could you try the Ozmo950 branch , generate new certificates, and see if it works for Android 9 as well?

@DENightOne - I haven't had the time to dig into this yet, however I made some changes to allow for the app to work on iOS13 which introduced some new certificate restrictions. The changes were added in https://github.com/bmartin5692/bumper/commit/e873e22fd35cecf66fa178e897e950bb47e12c9d and conform to the requirements from apple at https://support.apple.com/en-us/HT210176 If you are still using Bumper could you try the [Ozmo950 branch](https://github.com/bmartin5692/bumper/tree/ozmo950) , generate new certificates, and see if it works for Android 9 as well?

DENightOne commented

2019-10-03 14:32:52 +02:00

(Migrated from github.com)

Will do

Sent from Mailhttps://go.microsoft.com/fwlink/?LinkId=550986 for Windows 10

From: Brian Martin notifications@github.com
Sent: Thursday, October 3, 2019 2:27:28 PM
To: bmartin5692/bumper bumper@noreply.github.com
Cc: DENightOne tsymonds@hotmail.com; Mention mention@noreply.github.com
Subject: Re: [bmartin5692/bumper] Investigate Androind 9 (Pie) and Certificate Pinning (#43)

@DENightOnehttps://github.com/DENightOne - I haven't had the time to dig into this yet, however I made some changes to allow for the app to work on iOS13 which introduced some new certificate restrictions.

The changes were added in e873e22https://github.com/bmartin5692/bumper/commit/e873e22fd35cecf66fa178e897e950bb47e12c9d and conform to the requirements from apple at https://support.apple.com/en-us/HT210176

If you are still using Bumper could you try the Ozmo950 branchhttps://github.com/bmartin5692/bumper/tree/ozmo950 , generate new certificates, and see if it works for Android 9 as well?

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://github.com/bmartin5692/bumper/issues/43?email_source=notifications&email_token=AF5QUMKRUZMVQTWO4DEO45TQMXQLBA5CNFSM4HWPRSVKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEAIA42I#issuecomment-537923177, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AF5QUMOSDZW675AHN4PL44TQMXQLBANCNFSM4HWPRSVA.

Will do Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10 ________________________________ From: Brian Martin <notifications@github.com> Sent: Thursday, October 3, 2019 2:27:28 PM To: bmartin5692/bumper <bumper@noreply.github.com> Cc: DENightOne <tsymonds@hotmail.com>; Mention <mention@noreply.github.com> Subject: Re: [bmartin5692/bumper] Investigate Androind 9 (Pie) and Certificate Pinning (#43) @DENightOne<https://github.com/DENightOne> - I haven't had the time to dig into this yet, however I made some changes to allow for the app to work on iOS13 which introduced some new certificate restrictions. The changes were added in e873e22<https://github.com/bmartin5692/bumper/commit/e873e22fd35cecf66fa178e897e950bb47e12c9d> and conform to the requirements from apple at https://support.apple.com/en-us/HT210176 If you are still using Bumper could you try the Ozmo950 branch<https://github.com/bmartin5692/bumper/tree/ozmo950> , generate new certificates, and see if it works for Android 9 as well? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub<https://github.com/bmartin5692/bumper/issues/43?email_source=notifications&email_token=AF5QUMKRUZMVQTWO4DEO45TQMXQLBA5CNFSM4HWPRSVKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEAIA42I#issuecomment-537923177>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AF5QUMOSDZW675AHN4PL44TQMXQLBANCNFSM4HWPRSVA>.