The tag has no wiki summary.

learn more… | top users | synonyms (1)

0
votes
1answer
38 views

Unable to accept SSL certificate (k9mail)

I am setting up k9mail on a 4.2 device (rooted Sony Xperia Mini Pro with stock ROM and crap removed) and it complains about the IMAP SSL certificate not being valid. This happens with both a ...
1
vote
1answer
303 views

How to Bypass Certificate Errors in Google Chrome Android?

Apparently desktop Chrome has a flag called --ignore-certificate-errors that allows you to bypass all certificate warnings. Is there an equivalent for Android Chrome? I checked in chrome://flags but ...
0
votes
1answer
393 views

How to resolve “enter the password for credential storage” issue?

So I am playing around with fiddler web proxy. I need to decrypt https traffic. So I am trying to put the fiddler root CA cert in my device trust store. But it keeps asking me "Enter the password for ...
1
vote
1answer
101 views

Android browser: how to revoke ssl permission on a single site after giving it?

I'm building a website under ssl certificate. It just works on desktops but android browser argues that the ssl authority is not trustworthy. So to see the staging site I told it to just consider it ...
0
votes
0answers
98 views

How can I create a custom CRL (certificate revocation list) for my device?

I have an unrooted Motorola Moto G, which I am trying to prevent from downloading an OTA update. (see How can I cancel an ongoing OTA update download?) I decided to run my phone through Charles Web ...
0
votes
0answers
15 views

How do I add really trusted CA to my Android 4.4 device? [duplicate]

I want to inspect all traffic going from my device running Android 4.4.2. I have configured sslsplit-enabled Wi-Fi access point and installed the certificate to /system/etc/security/cacerts/. My CA ...
0
votes
1answer
219 views

Android does not download any files from untrusted CA certificate site

I work on a site that serves mobile phones and shares some file. When I publish my site in http everything works great. But when I activate SSL and publish my site via HTTPS with my own certificate, ...
1
vote
0answers
299 views

Why won't my Android phone access any HTTPS websites through WiFi?

My Samsung Galaxy Note 3 can not access any secured website while connected via my home WiFi – even applications like Google Search and Facebook can't access the internet and give an error saying ...
0
votes
1answer
539 views

Can't open non HTTPS websites on mobile network. (Android Lollipop on Nexus 5, Nexus 4)

I recently updated my Nexus 5 to Lollipop. The problem is that when I am on a mobile network, I can ONLY open HTTPS websites. All the HTTP websites appear as a blank white page. When I am on WiFi, ...
0
votes
1answer
151 views

HTTPS sites no longer load on my Android after installing cert to truststore

I have a rooted Android 4.3 JellyBean. I was testing something and trying to install the certificate for Charles Proxy so I could sniff some SSL traffic. I was able to push the Charles certificate to ...
0
votes
1answer
429 views

Setting up an HTTPS proxy

I use proxifier to connect to an HTTPS proxy on the PC, what should I do in order to connect similarly on my Android smartphone? My Android version is 4.3, Jelly Bean.
0
votes
0answers
16 views

Installed Comodo SSL certificate not showing in User in Trusted credentials [duplicate]

I am trying to install the SSL certificate for our exchange server. However although it says it is installed it is not showing under the User tab in settings --> personal --> security --> credential ...
1
vote
1answer
234 views

Page can't be loaded in S4 using http, but it does in https

I'm having special issues loading a website in my Galaxy S4, either Chrome and the default browser. In my case, when I try to access a website file using http, it throws an error 500, while accessing ...
0
votes
1answer
102 views

Is there any method through which I can make the YouTube app use https connections instead of http?

Well the question describes the problem. I know that the YouTube app is not using secure connections, and I want to force the YouTube app to use secure connections. Can this be done?
3
votes
2answers
368 views

Is Android susceptible to OpenSSL vulnerabilities? [duplicate]

There has been a big vulnerability discovered in OpenSSL today, are android applications affected, and what can we do to get a secure version? What about people with older devices (such as the HTC ...
1
vote
0answers
79 views

K9 mail — susceptible to MITM attacks?

I am using K9 on Android and have set the SSL option to 'SSL (strict)'. My understanding is that with this option K9 definitely requires a valid SSL certificate which is issued by a trusted CA, i.e. ...
0
votes
0answers
10 views

PDF on a https server can not be downloaded with Chrome [duplicate]

I try to download a pdf on an https server (with an authenfication) but this is unsuccessful with Chrome or LG Browser. This is ok with Firefox. I found this answer/comment : Unable to download from ...
6
votes
1answer
3k views

How to export SSL certificate from Android, Chrome

I have a Nexus 5 with the latest Android 4.4.2. Using Chrome I registered on . They use client certificates to authenticate the user. I installed the certificate and could successfully use the site ...
5
votes
1answer
7k views

self-signed certificate install claims success, but android acts as if cert isn't there

I am trying to install the self-signed certificate for my web server in Android 4.3. I have the .crt file in the root of the SD card (which is actually emulated as I have no SD card in the slot). To ...
7
votes
1answer
8k views

How do I install a user certificate?

I have my own Root certificate that signs user certificates. I have a site that will only allow you on with a user certificate which is signed by the root ca. I have managed to get this site working ...
1
vote
0answers
116 views

remove RC4 from SSL/TLS ciphers

is there a way to remove RC4 from SSL/TLS ciphers in android system wide such that also apps and not only the browser doesn't use them anymore? Thanks
2
votes
1answer
839 views

How do I import a user CA for the Email app properly?

For my own setup I use a personal CA: "Gert van Dijk CA". I'm using this for HTTPS and VPN successfully by importing the CA certificate into the Android keystore. I'm having trouble getting the Email ...
2
votes
1answer
2k views

Connection to home server via https – works with WiFi, but not with 3G

I have a very weird issue with my phone (Alcatel 997D running Android 4.0.4). Let me start at the beginning. I provide certain services (mostly syncing stuff, Firefox and Cal/CardDAV) on a server with ...
2
votes
0answers
252 views

Adding a self-signed certificate to the trusted list? [duplicate]

I have my own self-signed SSL certificate for a website I need to keep relatively secure. I've been able to install my client SSL certificate just fine, but I can't seem to install the server's ...
1
vote
2answers
5k views

Where to get OpenSSL binary for Android?

I have a Nexus 10 (unlocked & rooted) and I wanted to get the openssl binary on there so I can verify HTTPS certificates: $ openssl s_client -connect <IPADDRESS> However, no matter what I ...
2
votes
0answers
6k views

Resolving SSL Protocol Error on data connection but not on wifi [closed]

When I try to access secure web sites via https (ssl), I get an error. Chrome error message: Error 107 (net::ERR_SSL_PROTOCOL_ERROR) SSL_Protocol Error Firefox error message: ...
1
vote
1answer
2k views

Decrypting HTTPS Traffic from Android Apps via Fiddler?

I am actually trying to debug all the traffic going in and out on my phone. I am using Fiddler on my PC, and ProxyDroid on my phone to do this. HTTP traffic works fine. I am able to decrypt it ...
0
votes
1answer
3k views

Unable to open secure HTTPS websites on the tablet Android

My laptop and tablet are connected to the same access point. The LAN port of the WiFi point is connected to the router that uses DHCP protocol. I can access all the websites including secure ones ...
10
votes
2answers
318 views

How to know if a webview is using https

As a user, is there a way to know if the page displayed in a webview inside an application is using https or not?
1
vote
0answers
594 views

Unable to open Google's secure websites over HTTPS

I can easily open https secured sites on my Win7 laptop (using Google Chrome). But this is not possible with Chrome version 18.0.1025308 on my ONDA VI30W tablet (running ICS 4.0.3). What do I need to ...
2
votes
0answers
449 views

Shortening URLs using goo.gl and Tasker

I'm trying to use Tasker to shorten URLs. Previously, I don't think this was possible, but v1.3 added support for https. I've tried following the instructions here: ...
9
votes
2answers
29k views

What Trusted Root CAs are included in Android by default?

There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone ...
1
vote
1answer
267 views

What's a secure way to message/talk to someone in CM9?

I'm using CM9 nightly (20120712 i.e. today). I need to talk securely, without the chance of eavesdropping, to someone who also has CM9 nightly (not sure how up-to-date but not more than 1 month old). ...
2
votes
2answers
863 views

How to browse securely, anonymously and without blocks on Android?

So here's your Average Joe at a coffee store, using the open Wifi on his shiny new Android phone. Obviously there are the same issues with using a laptop or any other device on an open network, ...
0
votes
1answer
614 views

PanDigital Novel - how to replace/update certificate store?

After the DigiNotar fiasco, the Guardian Project put out the CACertMan application which allows a user to modify their certificate store on a rooted device. It doesn't work on Android 2.0, which is ...
0
votes
1answer
396 views

Is there a known issue with HTTPS and the Android browser?

I have a Galaxy S2 running 2.3.3, all up to date and not rooted. On several sites I find that logging in is impossible due to requests sent on HTTPS not returning a response. I've not tested the ...