原来这东西叫“证书锁定”，好高大上的名字。

你只要找到一个样本，查看ssl连接创建部分的代码，就能找到猫腻了。
然后改一个文件即可。

具体细节还是自己动手试试吧，直接说出来就没意思了。

Android-SSL-TrustKiller
This tool leverages Cydia Substrate to hook various methods in order to bypass certificate pinning by accepting any SSL certificate.
https://github.com/iSECPartners/Android-SSL-TrustKiller

JustTrustMe
An xposed module that disables SSL certificate checking. This is useful for auditing an appplication which does certificate pinning.
https://github.com/Fuzion24/JustTrustMe

iOS Application Security Part 36 – Bypassing Certificate Pinning Using SSL Kill Switch
http://highaltitudehacks.com/2014/11/03/ios-application-security-part-36-bypassing-certificate-pinning-using-ssl-kill-switch/

Automated Man in the Middle Script for Attacking SSL Connections.
https://github.com/tylerp96/StartMITM

SSL/TLS Interception Proxies and Transitive Trust
https://www.blackhat.com/html/bh-eu-12/bh-eu-12-archives.html#jarmoc

只能帮你到这里了

谢谢你，miui系统安装不上Cydia Substrate