From dcdb890e6d2428e4e98c4a19c99496abb531ef21 Mon Sep 17 00:00:00 2001
From: Matthias Urhahn <matthias.urhahn@sap.com>
Date: Wed, 9 Jun 2021 11:42:40 +0200
Subject: [PATCH] Re-enable certificate pinning. (#3386)
Co-authored-by: Mohamed Metwalli <mohamed.metwalli@sap.com>
---
.../src/main/res/xml/network_security_config.xml | 13 ++++++-------
1 file changed, 6 insertions(+), 7 deletions(-)
diff --git a/Corona-Warn-App/src/main/res/xml/network_security_config.xml b/Corona-Warn-App/src/main/res/xml/network_security_config.xml
index ffbf5cd7d..00fe53546 100644
--- a/Corona-Warn-App/src/main/res/xml/network_security_config.xml
+++ b/Corona-Warn-App/src/main/res/xml/network_security_config.xml
@@ -1,15 +1,14 @@
<?xml version="1.0" encoding="utf-8"?>
-<network-security-config>
+<network-security-config xmlns:tools="http://schemas.android.com/tools">
<domain-config cleartextTrafficPermitted="false">
<domain includeSubdomains="true">coronawarn.app</domain>
<domain includeSubdomains="true">main.px.t-online.de</domain>
- <!-- FIXME-->
- <!-- <pin-set-->
- <!-- expiration="2024-02-12"-->
- <!-- tools:ignore="MissingBackupPin">-->
- <!-- <pin digest="SHA-256">c3jf+L8VIAFQnJJDM6Mfb4MtI1JnhVS8JwZHMwJj28M=</pin>-->
- <!-- </pin-set>-->
+ <pin-set
+ expiration="2024-02-12"
+ tools:ignore="MissingBackupPin">
+ <pin digest="SHA-256">c3jf+L8VIAFQnJJDM6Mfb4MtI1JnhVS8JwZHMwJj28M=</pin>
+ </pin-set>
<trust-anchors>
<certificates
overridePins="false"
--
GitLab