要避免禁用Android的证书固定，可以按照以下解决方法：

1. 使用自定义的TrustManager进行证书验证：创建一个实现了X509TrustManager接口的自定义TrustManager，然后在该TrustManager中实现自定义的证书验证逻辑。以下是一个示例代码：

public class CustomTrustManager implements X509TrustManager {
    @Override
    public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
        // 自定义客户端证书验证逻辑
    }

    @Override
    public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
        // 自定义服务器证书验证逻辑
    }

    @Override
    public X509Certificate[] getAcceptedIssuers() {
        return new X509Certificate[]{};
    }
}

2. 使用自定义的SSLSocketFactory来创建HttpsURLConnection对象：创建一个实现了SSLSocketFactory接口的自定义SSLSocketFactory，然后在该SSLSocketFactory中使用自定义的TrustManager来创建SSLContext，并将其设置为HttpsURLConnection的默认SSLSocketFactory。以下是一个示例代码：

public class CustomSSLSocketFactory extends SSLSocketFactory {
    private SSLSocketFactory defaultSSLSocketFactory;

    public CustomSSLSocketFactory() throws KeyManagementException, NoSuchAlgorithmException {
        SSLContext sslContext = SSLContext.getInstance("TLS");
        sslContext.init(null, new TrustManager[]{new CustomTrustManager()}, new SecureRandom());
        defaultSSLSocketFactory = sslContext.getSocketFactory();
    }

    @Override
    public String[] getDefaultCipherSuites() {
        return defaultSSLSocketFactory.getDefaultCipherSuites();
    }

    @Override
    public String[] getSupportedCipherSuites() {
        return defaultSSLSocketFactory.getSupportedCipherSuites();
    }

    @Override
    public Socket createSocket(Socket socket, String host, int port, boolean autoClose) throws IOException {
        return defaultSSLSocketFactory.createSocket(socket, host, port, autoClose);
    }

    @Override
    public Socket createSocket(String host, int port) throws IOException {
        return defaultSSLSocketFactory.createSocket(host, port);
    }

    @Override
    public Socket createSocket(String host, int port, InetAddress localHost, int localPort) throws IOException {
        return defaultSSLSocketFactory.createSocket(host, port, localHost, localPort);
    }

    @Override
    public Socket createSocket(InetAddress host, int port) throws IOException {
        return defaultSSLSocketFactory.createSocket(host, port);
    }

    @Override
    public Socket createSocket(InetAddress address, int port, InetAddress localAddress, int localPort) throws IOException {
        return defaultSSLSocketFactory.createSocket(address, port, localAddress, localPort);
    }
}

3. 在代码中使用自定义的SSLSocketFactory：在进行网络请求的代码中，将HttpsURLConnection的默认SSLSocketFactory设置为自定义的SSLSocketFactory。以下是一个示例代码：

URL url = new URL("https://example.com");
HttpsURLConnection connection = (HttpsURLConnection) url.openConnection();
connection.setSSLSocketFactory(new CustomSSLSocketFactory());
// 继续进行网络请求

通过以上三个步骤，可以避免禁用Android的证书固定，同时实现自定义的证书验证逻辑。请注意，以上示例代码仅作为参考，实际实现中可能需要根据具体的需求进行适当的修改。