From 8472f2ca05620867cf159f3582a07b454bfc029d Mon Sep 17 00:00:00 2001 From: Tim Perry Date: Mon, 11 May 2026 13:38:11 +0200 Subject: [PATCH] Hook google play services Conscrypt too --- android/android-certificate-unpinning.js | 7 +++++++ android/android-system-certificate-injection.js | 3 ++- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/android/android-certificate-unpinning.js b/android/android-certificate-unpinning.js index a8b4216..db67807 100644 --- a/android/android-certificate-unpinning.js +++ b/android/android-certificate-unpinning.js @@ -146,6 +146,13 @@ const PINNING_FIXES = { } ], + 'com.google.android.gms.org.conscrypt.ct.CertificateTransparency': [ + { + methodName: 'checkCT', + replacement: () => NO_OP + } + ], + // --- Native pinning configuration loading (used for configuration by many libraries) 'android.security.net.config.NetworkSecurityConfig': [ diff --git a/android/android-system-certificate-injection.js b/android/android-system-certificate-injection.js index b957e16..79255f1 100644 --- a/android/android-system-certificate-injection.js +++ b/android/android-system-certificate-injection.js @@ -43,7 +43,8 @@ Java.perform(() => { [ 'com.android.org.conscrypt.TrustedCertificateIndex', 'org.conscrypt.TrustedCertificateIndex', // Might be used (com.android is synthetic) - unclear - 'org.apache.harmony.xnet.provider.jsse.TrustedCertificateIndex' // Used in Apache Harmony version of Conscrypt + 'org.apache.harmony.xnet.provider.jsse.TrustedCertificateIndex', // Used in Apache Harmony version of Conscrypt + 'com.google.android.gms.org.conscrypt.TrustedCertificateIndex', // Google Play Services bundled Conscrypt ].forEach((TrustedCertificateIndexClassname, i) => { let TrustedCertificateIndex; try {