Method Detail

• publicKeyPin

   final String publicKeyPin(X509Certificate certificate)

  Computes sha256/<base64> pin for a certificate's public key.

• verifySession

   final Boolean verifySession(String hostname, SSLSession session, List<String> pins)

  Verifies that peer certificates match at least one pin for hostname.

• pinningHostnameVerifier

   final HostnameVerifier pinningHostnameVerifier(Map<String, List<String>> configs, HostnameVerifier delegate)

  Hostname verifier that enforces SPKI pins in addition to default hostname checks. Multiple pins enable rotation (any match succeeds).

• systemSslContext

   final SSLContext systemSslContext()

  Creates an SSLContext using the system trust store.

• toHostnameMap

   final Map<String, List<String>> toHostnameMap(List<SslPinningConfig> configs)

  Converts SslPinningConfig list into hostname → pins map for pinningHostnameVerifier.