This Android application demonstrates how to integrate and use the TrustPin Kotlin SDK in an Android project.

• TrustPin Configuration: Configure organization ID, project ID, and public key
• OkHttp Integration: Demonstrates automatic certificate validation
• Network Testing: Test HTTPS connections with certificate pinning
• Error Handling: Comprehensive error handling and logging

• Android Studio Meerkat
• Android SDK
• Valid TrustPin configuration (organization ID, project ID, public key)

1. Open the project in Android Studio
2. Build the TrustPin SDK first:

   ./gradlew :assemble

3. Run the AndroidSample module

1. Launch the app
2. Enter your TrustPin configuration:
   • Organization ID: Your TrustPin organization identifier
   • Project ID: Your TrustPin project identifier
   • Public Key: Your base64-encoded ECDSA P-256 public key
3. Tap "Setup TrustPin" to configure the SDK

1. After configuration, enter a test URL (e.g., https://httpbin.org/get)
2. Tap "Test Connection" to make an HTTP request
3. View the results in the log output section

• MainActivity.kt: Main activity with UI and TrustPin integration
• activity_main.xml: Material Design UI layout
• Integration with OKHTTP for automatic certificate validation

TrustPin.setup(organizationId, projectId, publicKey)

val sslSocketFactory = TrustPinSSLSocketFactory.create()
val client = OkHttpClient.Builder()
    .connectTimeout(30, java.util.concurrent.TimeUnit.SECONDS)
    .readTimeout(30, java.util.concurrent.TimeUnit.SECONDS)
    .writeTimeout(30, java.util.concurrent.TimeUnit.SECONDS)
    .sslSocketFactory(sslSocketFactory, sslSocketFactory.trustManager())
    .build()

// Verify an X.509 certificate for a specific domain
val domain = "api.example.com"
val certificate: X509Certificate = // ... obtained from connection

try {
    TrustPin.verify(domain = domain, certificate = certificate)
    println("✅ Certificate is valid and matches configured pins")
} catch (e: TrustPinError.DomainNotRegistered) {
    println("⚠️ Domain not configured for pinning")
} catch (e: TrustPinError.PinsMismatch) {
    println("❌ Certificate doesn't match any configured pins")
} catch (e: TrustPinError) {
    println("💥 Verification failed: ${e.message}")
}

The app provides detailed logging to help understand:

• TrustPin configuration status
• Network request details
• Certificate validation results
• Error conditions

• The app allows HTTP traffic for testing purposes (usesCleartextTraffic="true")
• In production, remove cleartext traffic permission
• Store TrustPin configuration securely
• Consider using Android Keystore for sensitive data

1. Configuration Failed: Verify organization ID, project ID, and public key are correct
2. Network Errors: Check internet connectivity and URL validity
3. Certificate Validation Failed: Ensure the target domain has pins configured in TrustPin

Enable debug logging to see detailed TrustPin operation logs:

TrustPin.setLogLevel(TrustPinLogLevel.DEBUG)

The TrustPin Kotlin SDK is available on Maven Central: cloud.trustpin:kotlin-sdk

dependencies {
    implementation("cloud.trustpin:kotlin-sdk:0.0.6")
}

dependencies {
    implementation 'cloud.trustpin:kotlin-sdk:0.0.6'
}

<dependency>
    <groupId>cloud.trustpin</groupId>
    <artifactId>kotlin-sdk</artifactId>
    <version>0.0.6</version>
</dependency>

• TrustPin Kotlin SDK
• OkHttp for HTTP client
• Material Design Components
• AndroidX libraries
• Kotlin Coroutines