kirklin / kirklin/TrustMe

Not work for some APK

Open
#3 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Kotlin
Stars
37
Forks
9
PR merge metrics
No merged PRs in 30d

Description

### Describe the bug

I try with Apk with checkTrustedRecursive(X509Certificate)
It can't be bypassed but for other SSL it can work normally

Image

And the information from Trustme is only like that, I use Reqable to intercept it but it gives error 400 or even keeps getting rejected

### Reproduction

Update X509TrustManagerExtensions

### System Info

```Shell
System
```

### Validations

- [x] Follow our [Code of Conduct](https://github.com/kirklin/.github/blob/main/CODE_OF_CONDUCT.md)
- [x] Read the [Contributing Guide](https://github.com/kirklin/contribute).
- [x] Check that there isn't already an issue that reports the same bug to avoid creating a duplicate.
- [x] Check that this is a concrete bug. For Q&A, please open a GitHub Discussion instead.
- [x] The provided reproduction is a [minimal reproducible](https://stackoverflow.com/help/minimal-reproducible-example) of the bug.

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the failure with an APK that calls checkTrustedRecursive(X509Certificate), using the reported Reqable interception setup. Inspect the X509TrustManagerExtensions integration and compare it with the SSL cases that work normally. Done means the affected APK no longer returns HTTP 400 or remains rejected while the existing working cases continue to work.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, kotlin
Domain
mobile-dev, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.