Pinning: Split network security config for gplay and fdroid

tchapgouv · Feb 16, 2022 · d26e79b · d26e79b
1 parent 258deba
commit d26e79b
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/vector/src/fdroid/withpinning/res/xml/network_security_config.xml b/vector/src/fdroid/withpinning/res/xml/network_security_config.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+    <!-- Do not allow clearText traffic -->
+    <base-config cleartextTrafficPermitted="false">
+        <trust-anchors>
+            <!-- Do not allow system and user certificates -->
+
+            <!-- Allow only Tchap intermediate certificate authority -->
+            <certificates src="@raw/certignaservicesrootca" />
+        </trust-anchors>
+    </base-config>
+</network-security-config>
diff --git a/...nning/res/xml/network_security_config.xml → ...nning/res/xml/network_security_config.xml b/...nning/res/xml/network_security_config.xml → ...nning/res/xml/network_security_config.xml