kiosk-ops-sdk/com.sarastarquant.kioskops.sdk.transport.security/CertificatePin

CertificatePin

data class CertificatePin(val hostname: String, val sha256Pins: List<String>)

Certificate pin for a specific hostname.

Each pin represents a SHA-256 hash of a certificate's Subject Public Key Info (SPKI). Multiple pins per hostname allow for key rotation without service disruption.

Constructors

CertificatePin

constructor(hostname: String, sha256Pins: List<String>)

Properties

hostname

val hostname: String

The hostname to pin. Supports wildcard prefixes (e.g., ".example.com"). Wildcard only matches one level (.example.com matches api.example.com but not a.b.example.com).

sha256Pins

val sha256Pins: List<String>

List of Base64-encoded SHA-256 pin hashes for this hostname. Include both current and backup pins to support rotation.