Awesome

Peer certificate extractor

This tool extracts peer certificates from given certificates.

In order to implement certificate pinning during an SSL connection, a peer certificate needs to be declared first. This peer certificate is a certificate´s public key after being transformed using SHA256 algorithm and base64 encryption. This tool eases the peer certificate extraction task and supports files such as .crt, .der or .pem.

In order to extract a peer certificate:

    File certificate = new File(certificateUri);
    String peerCertificate = PeerCertificateExtractor.extract(certificate);

Retrieved peer certificates format:

    sha256/u4QJrwx7aSejc080BBQKGyTaoJovFBg4SbQ9nhoohb8=

For further usage examples, navigate to src/test

Okhttp

Enabling okhttp certificate pinning is now made the following way:

    client = new OkHttpClient.Builder()
                .certificatePinner(new CertificatePinner.Builder()
                    .add("publicobject.com", peerCertificate)
                    .build())
                .build();

License

Copyright 2016 Fabio Santana (fabiomsr)

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

   http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.