[Bug] SSL pinning is not working for both iOS and Android about cordova-plugin-advanced-http HOT 3 OPEN

Hi @takhil,
First, can you confirm thoses questions :

• You are using Cordova / not Capacitor?
• Is the certificate well a DER certificate (binary)?
  openssl x509 -inform der -in CERTIFICATE.cer -text -noout must succeed
• Extension is well .cer ?
• Your certificate is added through hook into www/certificates and you can find it in your final native platform (Android or iOS)

If yes ;
What error do you have? -2?
On both platform ?
Is your certificate self-signed? I remember having an issue with this kind of certificate.

EDIT: I suppose that you inject correctly http service in your angular component and that the setServerTrustMode() returns success.

Kr.

from cordova-plugin-advanced-http.

Hi @TiBz0u ,

Thanks for the response and I see error -2 from mobile app when I tried inject the serverTrustMode() and I checked the certificate with the command and certificate looks good.

Can you think of anything else?

from cordova-plugin-advanced-http.

Hi @takhil,

The serverTrustMode() method gives you only a success normally. It has to be done when your app starts. After that, if you respect what I explain above, it has to work.

Please double check the extension (.cer needed) and the format (must be DER et not PEM [base64]).

Otherwise, can you provide a public repository to check your configuration?

If you use a VPN, please make sure with the IT that the VPN doesn't encapsulate everything, it can be a problem too.

Kr.

from cordova-plugin-advanced-http.