react-native - 如何在 React Native 中实现 Swedish bankid SSL pinning

Question

我正在尝试在我的 react-native 应用程序中为瑞典 bankid 实现 SSL 固定，但没有找到任何可行的解决方案。我试过以下链接:1. https://github.com/localz/react-native-pinch但没有运气2. https://www.npmjs.com/package/react-native-ssl-pinning也没有运气:(

Answer 1

可能的方法

I am trying to implement SSL pinning for Swedish bankid in my react-native app but didn't find any working solution.

可以看this series关于使用 React Native 为 Android 和 iOS 实现证书固定的博客文章:

Enhance React Native’s networking API protection on Android and iOS without touching your Javascript code or manually editing the native code projects.

文章基于this Github repo，其中包含 Android 和 iOS 实现的代码:

react-native-cert-pinner

This package manages TLS certificate pinning in react-native for Android and iOS.

加倍努力

您似乎很关心移动应用程序的安全性，我建议您看一下:

OWASP Mobile Security Project - Top 10 risks

The OWASP Mobile Security Project is a centralized resource intended to give developers and security teams the resources they need to build and maintain secure mobile applications. Through the project, our goal is to classify mobile security risks and provide developmental controls to reduce their impact or likelihood of exploitation.