CertificatePinner.smali 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611
  1. .class public final Lokhttp3/CertificatePinner;
  2. .super Ljava/lang/Object;
  3. .source ""
  4. # annotations
  5. .annotation system Ldalvik/annotation/MemberClasses;
  6. value = {
  7. Lokhttp3/CertificatePinner$Builder;,
  8. Lokhttp3/CertificatePinner$Pin;
  9. }
  10. .end annotation
  11. # static fields
  12. .field public static final DEFAULT:Lokhttp3/CertificatePinner;
  13. # instance fields
  14. .field private final certificateChainCleaner:Lokhttp3/internal/tls/CertificateChainCleaner;
  15. .field private final pins:Ljava/util/Set;
  16. .annotation system Ldalvik/annotation/Signature;
  17. value = {
  18. "Ljava/util/Set<",
  19. "Lokhttp3/CertificatePinner$Pin;",
  20. ">;"
  21. }
  22. .end annotation
  23. .end field
  24. # direct methods
  25. .method static constructor <clinit>()V
  26. .locals 1
  27. new-instance v0, Lokhttp3/CertificatePinner$Builder;
  28. invoke-direct {v0}, Lokhttp3/CertificatePinner$Builder;-><init>()V
  29. invoke-virtual {v0}, Lokhttp3/CertificatePinner$Builder;->build()Lokhttp3/CertificatePinner;
  30. move-result-object v0
  31. sput-object v0, Lokhttp3/CertificatePinner;->DEFAULT:Lokhttp3/CertificatePinner;
  32. return-void
  33. .end method
  34. .method constructor <init>(Ljava/util/Set;Lokhttp3/internal/tls/CertificateChainCleaner;)V
  35. .locals 0
  36. .annotation system Ldalvik/annotation/Signature;
  37. value = {
  38. "(",
  39. "Ljava/util/Set<",
  40. "Lokhttp3/CertificatePinner$Pin;",
  41. ">;",
  42. "Lokhttp3/internal/tls/CertificateChainCleaner;",
  43. ")V"
  44. }
  45. .end annotation
  46. invoke-direct {p0}, Ljava/lang/Object;-><init>()V
  47. iput-object p1, p0, Lokhttp3/CertificatePinner;->pins:Ljava/util/Set;
  48. iput-object p2, p0, Lokhttp3/CertificatePinner;->certificateChainCleaner:Lokhttp3/internal/tls/CertificateChainCleaner;
  49. return-void
  50. .end method
  51. .method public static pin(Ljava/security/cert/Certificate;)Ljava/lang/String;
  52. .locals 2
  53. instance-of v0, p0, Ljava/security/cert/X509Certificate;
  54. if-eqz v0, :cond_0
  55. new-instance v0, Ljava/lang/StringBuilder;
  56. invoke-direct {v0}, Ljava/lang/StringBuilder;-><init>()V
  57. const-string v1, "sha256/"
  58. invoke-virtual {v0, v1}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
  59. check-cast p0, Ljava/security/cert/X509Certificate;
  60. invoke-static {p0}, Lokhttp3/CertificatePinner;->sha256(Ljava/security/cert/X509Certificate;)Lokio/ByteString;
  61. move-result-object p0
  62. invoke-virtual {p0}, Lokio/ByteString;->base64()Ljava/lang/String;
  63. move-result-object p0
  64. invoke-virtual {v0, p0}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
  65. invoke-virtual {v0}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;
  66. move-result-object p0
  67. return-object p0
  68. :cond_0
  69. new-instance p0, Ljava/lang/IllegalArgumentException;
  70. const-string v0, "Certificate pinning requires X509 certificates"
  71. invoke-direct {p0, v0}, Ljava/lang/IllegalArgumentException;-><init>(Ljava/lang/String;)V
  72. throw p0
  73. .end method
  74. .method static sha1(Ljava/security/cert/X509Certificate;)Lokio/ByteString;
  75. .locals 0
  76. invoke-virtual {p0}, Ljava/security/cert/X509Certificate;->getPublicKey()Ljava/security/PublicKey;
  77. move-result-object p0
  78. invoke-interface {p0}, Ljava/security/PublicKey;->getEncoded()[B
  79. move-result-object p0
  80. invoke-static {p0}, Lokio/ByteString;->of([B)Lokio/ByteString;
  81. move-result-object p0
  82. invoke-virtual {p0}, Lokio/ByteString;->sha1()Lokio/ByteString;
  83. move-result-object p0
  84. return-object p0
  85. .end method
  86. .method static sha256(Ljava/security/cert/X509Certificate;)Lokio/ByteString;
  87. .locals 0
  88. invoke-virtual {p0}, Ljava/security/cert/X509Certificate;->getPublicKey()Ljava/security/PublicKey;
  89. move-result-object p0
  90. invoke-interface {p0}, Ljava/security/PublicKey;->getEncoded()[B
  91. move-result-object p0
  92. invoke-static {p0}, Lokio/ByteString;->of([B)Lokio/ByteString;
  93. move-result-object p0
  94. invoke-virtual {p0}, Lokio/ByteString;->sha256()Lokio/ByteString;
  95. move-result-object p0
  96. return-object p0
  97. .end method
  98. # virtual methods
  99. .method public check(Ljava/lang/String;Ljava/util/List;)V
  100. .locals 12
  101. .annotation system Ldalvik/annotation/Signature;
  102. value = {
  103. "(",
  104. "Ljava/lang/String;",
  105. "Ljava/util/List<",
  106. "Ljava/security/cert/Certificate;",
  107. ">;)V"
  108. }
  109. .end annotation
  110. .annotation system Ldalvik/annotation/Throws;
  111. value = {
  112. Ljavax/net/ssl/SSLPeerUnverifiedException;
  113. }
  114. .end annotation
  115. invoke-virtual {p0, p1}, Lokhttp3/CertificatePinner;->findMatchingPins(Ljava/lang/String;)Ljava/util/List;
  116. move-result-object v0
  117. invoke-interface {v0}, Ljava/util/List;->isEmpty()Z
  118. move-result v1
  119. if-eqz v1, :cond_0
  120. return-void
  121. :cond_0
  122. iget-object v1, p0, Lokhttp3/CertificatePinner;->certificateChainCleaner:Lokhttp3/internal/tls/CertificateChainCleaner;
  123. if-eqz v1, :cond_1
  124. invoke-virtual {v1, p2, p1}, Lokhttp3/internal/tls/CertificateChainCleaner;->clean(Ljava/util/List;Ljava/lang/String;)Ljava/util/List;
  125. move-result-object p2
  126. :cond_1
  127. invoke-interface {p2}, Ljava/util/List;->size()I
  128. move-result v1
  129. const/4 v2, 0x0
  130. const/4 v3, 0x0
  131. :goto_0
  132. if-ge v3, v1, :cond_8
  133. invoke-interface {p2, v3}, Ljava/util/List;->get(I)Ljava/lang/Object;
  134. move-result-object v4
  135. check-cast v4, Ljava/security/cert/X509Certificate;
  136. invoke-interface {v0}, Ljava/util/List;->size()I
  137. move-result v5
  138. const/4 v6, 0x0
  139. move-object v7, v6
  140. move-object v8, v7
  141. const/4 v6, 0x0
  142. :goto_1
  143. if-ge v6, v5, :cond_7
  144. invoke-interface {v0, v6}, Ljava/util/List;->get(I)Ljava/lang/Object;
  145. move-result-object v9
  146. check-cast v9, Lokhttp3/CertificatePinner$Pin;
  147. iget-object v10, v9, Lokhttp3/CertificatePinner$Pin;->hashAlgorithm:Ljava/lang/String;
  148. const-string v11, "sha256/"
  149. invoke-virtual {v10, v11}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z
  150. move-result v10
  151. if-eqz v10, :cond_3
  152. if-nez v7, :cond_2
  153. invoke-static {v4}, Lokhttp3/CertificatePinner;->sha256(Ljava/security/cert/X509Certificate;)Lokio/ByteString;
  154. move-result-object v7
  155. :cond_2
  156. iget-object v9, v9, Lokhttp3/CertificatePinner$Pin;->hash:Lokio/ByteString;
  157. invoke-virtual {v9, v7}, Lokio/ByteString;->equals(Ljava/lang/Object;)Z
  158. move-result v9
  159. if-eqz v9, :cond_5
  160. return-void
  161. :cond_3
  162. iget-object v10, v9, Lokhttp3/CertificatePinner$Pin;->hashAlgorithm:Ljava/lang/String;
  163. const-string v11, "sha1/"
  164. invoke-virtual {v10, v11}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z
  165. move-result v10
  166. if-eqz v10, :cond_6
  167. if-nez v8, :cond_4
  168. invoke-static {v4}, Lokhttp3/CertificatePinner;->sha1(Ljava/security/cert/X509Certificate;)Lokio/ByteString;
  169. move-result-object v8
  170. :cond_4
  171. iget-object v9, v9, Lokhttp3/CertificatePinner$Pin;->hash:Lokio/ByteString;
  172. invoke-virtual {v9, v8}, Lokio/ByteString;->equals(Ljava/lang/Object;)Z
  173. move-result v9
  174. if-eqz v9, :cond_5
  175. return-void
  176. :cond_5
  177. add-int/lit8 v6, v6, 0x1
  178. goto :goto_1
  179. :cond_6
  180. new-instance p1, Ljava/lang/AssertionError;
  181. new-instance p2, Ljava/lang/StringBuilder;
  182. invoke-direct {p2}, Ljava/lang/StringBuilder;-><init>()V
  183. const-string v0, "unsupported hashAlgorithm: "
  184. invoke-virtual {p2, v0}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
  185. iget-object v0, v9, Lokhttp3/CertificatePinner$Pin;->hashAlgorithm:Ljava/lang/String;
  186. invoke-virtual {p2, v0}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
  187. invoke-virtual {p2}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;
  188. move-result-object p2
  189. invoke-direct {p1, p2}, Ljava/lang/AssertionError;-><init>(Ljava/lang/Object;)V
  190. throw p1
  191. :cond_7
  192. add-int/lit8 v3, v3, 0x1
  193. goto :goto_0
  194. :cond_8
  195. new-instance v1, Ljava/lang/StringBuilder;
  196. invoke-direct {v1}, Ljava/lang/StringBuilder;-><init>()V
  197. const-string v3, "Certificate pinning failure!"
  198. invoke-virtual {v1, v3}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
  199. const-string v3, "\n Peer certificate chain:"
  200. invoke-virtual {v1, v3}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
  201. invoke-interface {p2}, Ljava/util/List;->size()I
  202. move-result v3
  203. const/4 v4, 0x0
  204. :goto_2
  205. const-string v5, "\n "
  206. if-ge v4, v3, :cond_9
  207. invoke-interface {p2, v4}, Ljava/util/List;->get(I)Ljava/lang/Object;
  208. move-result-object v6
  209. check-cast v6, Ljava/security/cert/X509Certificate;
  210. invoke-virtual {v1, v5}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
  211. invoke-static {v6}, Lokhttp3/CertificatePinner;->pin(Ljava/security/cert/Certificate;)Ljava/lang/String;
  212. move-result-object v5
  213. invoke-virtual {v1, v5}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
  214. const-string v5, ": "
  215. invoke-virtual {v1, v5}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
  216. invoke-virtual {v6}, Ljava/security/cert/X509Certificate;->getSubjectDN()Ljava/security/Principal;
  217. move-result-object v5
  218. invoke-interface {v5}, Ljava/security/Principal;->getName()Ljava/lang/String;
  219. move-result-object v5
  220. invoke-virtual {v1, v5}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
  221. add-int/lit8 v4, v4, 0x1
  222. goto :goto_2
  223. :cond_9
  224. const-string p2, "\n Pinned certificates for "
  225. invoke-virtual {v1, p2}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
  226. invoke-virtual {v1, p1}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
  227. const-string p1, ":"
  228. invoke-virtual {v1, p1}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
  229. invoke-interface {v0}, Ljava/util/List;->size()I
  230. move-result p1
  231. :goto_3
  232. if-ge v2, p1, :cond_a
  233. invoke-interface {v0, v2}, Ljava/util/List;->get(I)Ljava/lang/Object;
  234. move-result-object p2
  235. check-cast p2, Lokhttp3/CertificatePinner$Pin;
  236. invoke-virtual {v1, v5}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
  237. invoke-virtual {v1, p2}, Ljava/lang/StringBuilder;->append(Ljava/lang/Object;)Ljava/lang/StringBuilder;
  238. add-int/lit8 v2, v2, 0x1
  239. goto :goto_3
  240. :cond_a
  241. new-instance p1, Ljavax/net/ssl/SSLPeerUnverifiedException;
  242. invoke-virtual {v1}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;
  243. move-result-object p2
  244. invoke-direct {p1, p2}, Ljavax/net/ssl/SSLPeerUnverifiedException;-><init>(Ljava/lang/String;)V
  245. goto :goto_5
  246. :goto_4
  247. throw p1
  248. :goto_5
  249. goto :goto_4
  250. .end method
  251. .method public varargs check(Ljava/lang/String;[Ljava/security/cert/Certificate;)V
  252. .locals 0
  253. .annotation system Ldalvik/annotation/Throws;
  254. value = {
  255. Ljavax/net/ssl/SSLPeerUnverifiedException;
  256. }
  257. .end annotation
  258. invoke-static {p2}, Ljava/util/Arrays;->asList([Ljava/lang/Object;)Ljava/util/List;
  259. move-result-object p2
  260. invoke-virtual {p0, p1, p2}, Lokhttp3/CertificatePinner;->check(Ljava/lang/String;Ljava/util/List;)V
  261. return-void
  262. .end method
  263. .method public equals(Ljava/lang/Object;)Z
  264. .locals 3
  265. const/4 v0, 0x1
  266. if-ne p1, p0, :cond_0
  267. return v0
  268. :cond_0
  269. instance-of v1, p1, Lokhttp3/CertificatePinner;
  270. if-eqz v1, :cond_1
  271. iget-object v1, p0, Lokhttp3/CertificatePinner;->certificateChainCleaner:Lokhttp3/internal/tls/CertificateChainCleaner;
  272. check-cast p1, Lokhttp3/CertificatePinner;
  273. iget-object v2, p1, Lokhttp3/CertificatePinner;->certificateChainCleaner:Lokhttp3/internal/tls/CertificateChainCleaner;
  274. invoke-static {v1, v2}, Lokhttp3/internal/Util;->equal(Ljava/lang/Object;Ljava/lang/Object;)Z
  275. move-result v1
  276. if-eqz v1, :cond_1
  277. iget-object v1, p0, Lokhttp3/CertificatePinner;->pins:Ljava/util/Set;
  278. iget-object p1, p1, Lokhttp3/CertificatePinner;->pins:Ljava/util/Set;
  279. invoke-interface {v1, p1}, Ljava/util/Set;->equals(Ljava/lang/Object;)Z
  280. move-result p1
  281. if-eqz p1, :cond_1
  282. goto :goto_0
  283. :cond_1
  284. const/4 v0, 0x0
  285. :goto_0
  286. return v0
  287. .end method
  288. .method findMatchingPins(Ljava/lang/String;)Ljava/util/List;
  289. .locals 4
  290. .annotation system Ldalvik/annotation/Signature;
  291. value = {
  292. "(",
  293. "Ljava/lang/String;",
  294. ")",
  295. "Ljava/util/List<",
  296. "Lokhttp3/CertificatePinner$Pin;",
  297. ">;"
  298. }
  299. .end annotation
  300. invoke-static {}, Ljava/util/Collections;->emptyList()Ljava/util/List;
  301. move-result-object v0
  302. iget-object v1, p0, Lokhttp3/CertificatePinner;->pins:Ljava/util/Set;
  303. invoke-interface {v1}, Ljava/util/Set;->iterator()Ljava/util/Iterator;
  304. move-result-object v1
  305. :cond_0
  306. :goto_0
  307. invoke-interface {v1}, Ljava/util/Iterator;->hasNext()Z
  308. move-result v2
  309. if-eqz v2, :cond_2
  310. invoke-interface {v1}, Ljava/util/Iterator;->next()Ljava/lang/Object;
  311. move-result-object v2
  312. check-cast v2, Lokhttp3/CertificatePinner$Pin;
  313. invoke-virtual {v2, p1}, Lokhttp3/CertificatePinner$Pin;->matches(Ljava/lang/String;)Z
  314. move-result v3
  315. if-eqz v3, :cond_0
  316. invoke-interface {v0}, Ljava/util/List;->isEmpty()Z
  317. move-result v3
  318. if-eqz v3, :cond_1
  319. new-instance v0, Ljava/util/ArrayList;
  320. invoke-direct {v0}, Ljava/util/ArrayList;-><init>()V
  321. :cond_1
  322. invoke-interface {v0, v2}, Ljava/util/List;->add(Ljava/lang/Object;)Z
  323. goto :goto_0
  324. :cond_2
  325. return-object v0
  326. .end method
  327. .method public hashCode()I
  328. .locals 2
  329. iget-object v0, p0, Lokhttp3/CertificatePinner;->certificateChainCleaner:Lokhttp3/internal/tls/CertificateChainCleaner;
  330. if-eqz v0, :cond_0
  331. invoke-virtual {v0}, Ljava/lang/Object;->hashCode()I
  332. move-result v0
  333. goto :goto_0
  334. :cond_0
  335. const/4 v0, 0x0
  336. :goto_0
  337. mul-int/lit8 v0, v0, 0x1f
  338. iget-object v1, p0, Lokhttp3/CertificatePinner;->pins:Ljava/util/Set;
  339. invoke-interface {v1}, Ljava/util/Set;->hashCode()I
  340. move-result v1
  341. add-int/2addr v0, v1
  342. return v0
  343. .end method
  344. .method withCertificateChainCleaner(Lokhttp3/internal/tls/CertificateChainCleaner;)Lokhttp3/CertificatePinner;
  345. .locals 2
  346. iget-object v0, p0, Lokhttp3/CertificatePinner;->certificateChainCleaner:Lokhttp3/internal/tls/CertificateChainCleaner;
  347. invoke-static {v0, p1}, Lokhttp3/internal/Util;->equal(Ljava/lang/Object;Ljava/lang/Object;)Z
  348. move-result v0
  349. if-eqz v0, :cond_0
  350. move-object v0, p0
  351. goto :goto_0
  352. :cond_0
  353. new-instance v0, Lokhttp3/CertificatePinner;
  354. iget-object v1, p0, Lokhttp3/CertificatePinner;->pins:Ljava/util/Set;
  355. invoke-direct {v0, v1, p1}, Lokhttp3/CertificatePinner;-><init>(Ljava/util/Set;Lokhttp3/internal/tls/CertificateChainCleaner;)V
  356. :goto_0
  357. return-object v0
  358. .end method