jinal90

// get the TrustStore that you just placed in resources
val resourceStream = resources.openRawResource(R.raw.your_trust_store)

// create an empty default KeyStore
val keyStoreType = KeyStore.getDefaultType()
val keyStore = KeyStore.getInstance(keyStoreType)

// load the KeyStore from input stream of TrustStore
keyStore.load(resourceStream, getTrustStorePassword()?.toCharArray())

jinal90

// Create CertificatePinner object which contatins list of domains and associated SHA-256 keys. 
// Pin this CertificatePinner object while creating the OKHTTP client.
private val client = OkHttpClient.Builder()
      .certificatePinner(
          CertificatePinner.Builder()
              .add("www.example.com", "sha256/7HIpactkIAq2Y49orFOOQKurWxmmSFZhBCoQYcRhJ3Y=")
              .build())
      .build()
      
// Implement rest service call 

jinal90

Retrofit retrofit = new Retrofit.Builder()
    .baseUrl("https://www.example.com")
    .client(okHttpClientWithCertificatePinner)
    .build();
    
YourServiceClass service = retrofit.create(YourServiceClass.class);
    

jinal90

// 1. Basic configuration for creating Alamofire manager
let configuration = URLSessionConfiguration.default
configuration.httpAdditionalHeaders = SessionManager.defaultHTTPHeaders
configuration.timeoutIntervalForRequest = 60

var serverTrustPolicies: [String: ServerTrustPolicy] = [:]

// 2. Pass your certificate filename, type and directory path to load the cefrtificate
guard let certificatePath = Bundle.main.path(forResource: "CertificateFileName", ofType: "der", inDirectory: "assets/certificate") else{

jinal90

class MyViewController: UIViewController, URLSessionDelegate {   
  //
  // MARK: - Constants
  //
  
  let pinnedCertificates: [Data] = {
    let url = Bundle.main.url(forResource: "certificate_name", withExtension: "der")!
    let data = try! Data(contentsOf: url)
    return [data]
  }()

jinal90

var dataTask: URLSessionDataTask?
if var urlComponents = URLComponents(string: "https://www.example.com") {
  urlComponents.query = "paramKey=value"
    
  guard let url = urlComponents.url else {
    return
  }
    
  var defaultSession = URLSession(configuration: .default, delegate: self, delegateQueue: nil)
  dataTask = defaultSession.dataTask(with: url) { [weak self] data, response, error in

jinal90

func urlSession(_ session: URLSession, didReceive challenge: URLAuthenticationChallenge, completionHandler: @escaping (URLSession.AuthChallengeDisposition, URLCredential?) -> Void) {
    if let trust = challenge.protectionSpace.serverTrust,
         SecTrustGetCertificateCount(trust) > 0 {
      if let certificate = SecTrustGetCertificateAtIndex(trust, 0) {
        let data = SecCertificateCopyData(certificate) as Data
        
        if certificates.contains(data) {
            completionHandler(.useCredential, URLCredential(trust: trust))
            return
        }