Questions tagged [certificates]

A web infrastructure construct that facilitates the trust relationship between a web site as information provider and a client's web client (browser) as information consumer. It contains elements to satisfy authentication to satisfy requirements that parties to the connection are who they claim to be, and assist in handshaking for paired encryption methods to satisfy secure communication.

Filter by
Sorted by
Tagged with
1 vote
0 answers
56 views

Unable to use installed WiFi certificate on Pixel 6a

I am trying to connect my Pixel 6a to WiFi using a CA certificate. When I select install certificates from the dropdown box, install the certificate, and put in the password to extract it, there is no ...
Anna G's user avatar
  • 11
7 votes
2 answers
730 views

HTTPS filtering breaks some apps

I have enabled HTTPS filtering in AdGuard. I installed AdGuard's certificates, and the Magisk module that moves the certificates to the system store. Nevertheless, some apps don't work. Why is this? ...
lamppost01's user avatar
1 vote
1 answer
187 views

How to inspect any android app's HTTP/HTTPS request using Requestly.io?

Requestly.io currently allows to intersect the HTTP and HTTPS packets if requests are made from google chrome as the SSL certificates can not be installed for "VPN and App". How to inspect ...
Chandan Singh's user avatar
0 votes
0 answers
39 views

How to access a private network on Quest2's Android 12

I am trying to connect MetaQuest2's Android 12 to a Wi-Fi network that does not broadcast SSID, but the connection button is not enabling. The certificate installation was successful and the proxy ...
Kimmy's user avatar
  • 1
1 vote
0 answers
234 views

Issue using own CA cert on Bluestacks emulator

I am trying to set up TLS interception with PolarProxy, using my own CA cert to see the clear-text payload of Android traffic. I am using BlueStacks 10 as an Android emulator. I used the procedure at ...
Arnav's user avatar
  • 11
0 votes
0 answers
128 views

How do I trust a certificate on android 11 device?

I want to setup this app called Http Toolkit and for some reason I have the warning "System Trust Disabled". My android 11 device is rooted using ksu . How do I trust a certificate on ...
Frk's user avatar
  • 1
2 votes
0 answers
92 views

How to identify which app is creating user credentials in the security settings?

I was going through my Android device settings and found "rsa key" stored in user credentials. There, it says the "rsa key" is for VPN and apps. But I don't use any VPN. How to ...
RandomCookieStealer's user avatar
1 vote
1 answer
2k views

How to get Chrome (or any browser) to present a TLS client certificate?

I've set up a server that accepts HTTPS connections with a custom CA certificate. I've installed it on my Samsung Galaxy A50, and can now access the server without warnings in Chrome. Now, I'd like to ...
Danya02's user avatar
  • 141
0 votes
0 answers
96 views

Internet on Android apps fail when on ethernet cable

I have a strange problem. When connected to WiFi, I have no issues. When I connect a UTP cable to my device via a USB ethernet adaptor, I can browse the internet, but apps won't work. I can, for ...
ZEDA-NL's user avatar
  • 101
4 votes
1 answer
379 views

SSL certificate fails only on Chromium browsers in Android

A client of ours has a website that works on most browsers. However, when trying to open it in Chrome (114), Edge (114) or Samsung Internet (21) on Android, there is an error message saying Your ...
Berend's user avatar
  • 293
0 votes
0 answers
38 views

Can serialNumber of hardware attestation certificate be used to uniquely identify a device?

When performing hardware attestation on Android, a new key-pair is created in the TEE, and the whole certificate chain is returned to the user, verifying that the key-pair was indeed created in the ...
g00dds's user avatar
  • 111
0 votes
1 answer
673 views

Can't install CA certificate

We're trying to set up a new VPN infrastructure and have hit a roadblock with Android. For some reason we are unable to install the corporate CA that's issued the VPN server certs. My LineageOS 18.1 (...
miken32's user avatar
  • 121
0 votes
0 answers
374 views

User installed Wi-Fi certificates cannot be viewed in Android?

In Android 11, when we go into Security > Encryption & credentials > Trusted credentials > Tap on any system certificate, it will show certificate details like Issued by, Validity, ...
Ramesh Aravind M's user avatar
1 vote
0 answers
397 views

How should a user certificate be formatted so that it can be used for mTLS on a phone running android 13?

I'm trying to install a user certificate on a pixel 7 running android 13 which will be used to connect to a website which requires mTLS. The CA and intermediate cert which signed the user cert are ...
fcorrao's user avatar
  • 111
3 votes
0 answers
1k views

Cannot add new Certificates to Android Device

Using a Pixel 6a, running Android 13. I am trying to install certificates from a private CA I have established on the internal network. I was able to install the root certificate by doing the ...
JLCarveth's user avatar
1 vote
0 answers
53 views

Cannot enable Huawei Wallet fingerprint verification — "Unable to apply for certificate"

A friend of mine has a Huawei Nova 9 SE and wants to his bank cards in the Wallet app so he could pay directly with the phone. Every time when we try to add the card, it says we should enter the PIN ...
Ionică Bizău's user avatar
0 votes
0 answers
53 views

Is there an endpoint to get Google Root Certificates list for verifying hardware-backed key pairs?

I would like to verify a hardware-backed key pair in my Java backend service. According to the Verifying hardware-backed key pairs with Key Attestation page, I need to verify the attestation object ...
Lukasz Blasiak's user avatar
0 votes
0 answers
282 views

How do I install/update the Trusted Certificate Store on a Lenovo IdeaTab?

Most of the tutorials I have found either allow you to open a file browser to browse to the cert(that button isn't visible on my device), or install from an SD card. I tried the install from SD card ...
WetSpicyWaterturtle's user avatar
2 votes
0 answers
296 views

Cannot delete some custom user certificates on Android 10

I have added user certificates, but Android do not let me delete most of them. How did I add the certificates: Open the setting drop down menu Go to Biometrics and Security -> Other Security ...
TonyStacker's user avatar
0 votes
2 answers
711 views

Can a school wifi certificate track me at home?

At my school, when logging into wifi for the first time, we enter our ID & password into a normal wifi login page, then we download a certificate. I cannot confirm if the certificate changes ...
anonymousaga's user avatar
1 vote
0 answers
2k views

How can I install a user CA certificate from a .pem file?

I have a .pem file and -key.pem. I'm on a Pixel 4a with Android 13, and when I go to Settings -> Security -> Advanced Settings -> Encryption -> Install certificate -> CA certificate, I ...
CalSch's user avatar
  • 11
1 vote
0 answers
1k views

Legacy Android 4.0 CA-Certificates Update

I have two legacy Android 4.0 Garmin Monterra devices. It's not possible anymore to open the google play store or some websites. When I open most of the websites with chrome I receive a SSL error 107. ...
mkey's user avatar
  • 11
3 votes
0 answers
4k views

Cannot install certificates. Error: "Private key required to install a certificate"

I am trying to download and install a certificate to use my workplace's wifi. I have a Pixel 2 running Android 11. I took these steps to install the certificate as intended: I Download the file, go ...
JamesR's user avatar
  • 31
2 votes
1 answer
8k views

Can't select CA certificate

Even after installing a CA certificate, I am not able to select it in the network configuration. I just get this message "CA certificate must be selected" but I can't find where I can do it. ...
annoyed8's user avatar
0 votes
1 answer
560 views

Unable to install P12 certificate in Android 8.1.0

I am using an LG Aristo 2 Plus, Android 8.1.0, and have a CA and client certificate to use for a wifi network. I have downloaded the certificates onto my phone and when I attempt to install them ...
Walter's user avatar
  • 103
3 votes
1 answer
2k views

How can I import a Root CA that's trusted by Chrome on Android 11

I have a Root CA (airgapped, openssl) that I use for a lot of internal lab projects. In the past, I've just imported the CA cert into the User credentials store on Android and the system began ...
Matthew Manjos's user avatar
1 vote
1 answer
273 views

Capture TLS handshake

I would like to capture TLS handshakes coming from Android. I was able to install a certificate using this instruction, then I started a server: openssl s_server -key my_site.key -cert my_site.crt -...
Zombo's user avatar
  • 1
0 votes
0 answers
86 views

Android 7 breaks certificates on Samsung Browser and in Whatsapp

On a Samsung S6 Plus Edge running on Android 7, certain security certificates will break since September 2021: the workaround which Let's Encrypt implemented doesn't seem to work in Samsung Internet. ...
1NN's user avatar
  • 111
2 votes
0 answers
108 views

Certificates and deadlines

Scope: mobile - Android Subject: Let's Encrypt certificate, ISRG Root X1 Hi, as Internet veterans know well, this certificate has expired since September 30th. Many "obsolete" devices have ...
Bento's user avatar
  • 165
1 vote
1 answer
609 views

Decrypting a user private key cert in keystore

Would like to ask if it is possible to decrypt the user private key store found in android keystore. I know that you need the masterkey to decrypt it. But is it possible to obtain the masterkey from a ...
new-to-networking's user avatar
13 votes
1 answer
14k views

Make SSL certificate trusted by Chrome for Android

I want Chrome to trust an SSL certificate. How do I add this certificate or its issuing authority to the system or browser so that Chrome will not generate an error upon trying to access the website ...
Melab's user avatar
  • 785
1 vote
0 answers
36 views

Revoking Certificates for VPN Connection

would like to ask what happens when you press on the clear credentials options during an established always-on VPN connection. As I came across a situation where: The CA certificated was installed on ...
new-to-networking's user avatar
3 votes
1 answer
421 views

How can I get back lost internet access on Android 4.x or lower?

I have an Acer A500 tablet running Android 4.0.3. Trying this after not using for some time I find it can't access most websites, getting "Webpage not available" in Opera Mini browser. I ...
marcris's user avatar
  • 31
1 vote
0 answers
2k views

How do I make Android 11 stop removing a Wi-Fi certificate?

I'm using a Google Pixel 3a. A week ago, it was connecting all well to the corporate Wi-Fi which uses WPA Enterprise, but recently, it stopped. In order to connect, I do the following: Download the ...
Arseni Mourzenko's user avatar
5 votes
1 answer
30k views

How to get Android 11 to trust a user root CA without a private key?

I'm trying to install a new user root CA certificate in DER form (.crt file) on Android 11, without much success. The previous (expired) CA certificate worked just fine from an earlier install on a ...
F.X.'s user avatar
  • 437
2 votes
0 answers
127 views

app keystore and certs in phone storage?

is there method to view and export files from phone storage keystore? the android app i got has the keystore to managed digital user certs, it can be viewed via UI, i wanted to view them in phone ...
guo's user avatar
  • 21
0 votes
1 answer
92 views

Cannot Enable Certificates

I've got a Samsung Galaxy J3 Prime running Oreo 8.1 that is getting NET::ERR_CERT_AUTHORITY_INVALID on literally every website, regardless of browser. When I check the security certificates (Settings ...
user3689417's user avatar
0 votes
0 answers
34 views

Android 7.1 certificates are going to expire, anyway to renew them? [duplicate]

starting from September android 7.1 and below users are going to have issues with the internet so is there anyway to renew those certificates so i can use my phone properly?
PranshuTheGamer's user avatar
0 votes
0 answers
83 views

Applications on Android are not using Certificate Pinning

I'm doing a study for university and part of this study is to gather a group of android applications and check which of these applications use Cert Pinning. I am doing this by using fiddler as a proxy(...
Angele Aquilina's user avatar
4 votes
2 answers
6k views

Android 11 does not trust a theoretically properly imported private CA for WiFi EAP-TLS

This question is similar, but unrelated to this one answered two days ago. I have been using WiFi EAP-TLS at home, for nearly a full year, with multiple desktop operating systems and Android 10 with ...
79616e6f706521's user avatar
1 vote
0 answers
1k views

Exporting a CA certificate from Android to Android?

I'm trying to install an openssl CA certificate on my Pixel 5, previously I was able to install it directly through the app I was using on my old Pixel 2 but with the new security measures this is no ...
Paige's user avatar
  • 11
13 votes
5 answers
48k views

No option to choose "Do Not Validate" under "CA certificates" when connecting to PEAP/MSCHAPV2 WiFi (Android 11)

I can't connect to campus WiFi anymore after installing latest ROM with december 2020 security patches. The configuration is PEAP/MSCHAPV2. Under CA certificate, we usually choose "Do not ...
Yogesh Yadav's user avatar
4 votes
1 answer
1k views

Can I enroll my device in Android Enterprise to install a root CA?

My phone can't be rooted but I want to MITM my own traffic. Is there any downside to enrolling my device as a managed enterprise device and installing a certificate through the program? It seems ...
Jon's user avatar
  • 579
9 votes
1 answer
3k views

Let's Encrypt: Is there a workaround for the 2021 SSL "cutoff" for pre-7.1.1 Android devices?

In January 2021 all devices with Android prior to 7.1.1 will not be able to connect to HTTPS servers using Let's Encrypt certificate (Let's Encrypt blog post explaining the details) Is there any ...
Alexander M's user avatar
0 votes
0 answers
443 views

Android 10 user CA file not being used in apps

I'm using an ISP that does internet filtering for me, I have install their CA file, and it works in the browser, and used to work in all apps. After the latest update for Xiaomi Redmi Pro 9, Youtube, ...
Sniffleh's user avatar
  • 101
0 votes
0 answers
1k views

How can I copy specific wifi networks from one Android device to another?

I have a rooted Android 7.1.1 phone with a large number of wireless networks configured; some of these are relatively complicated (EAP-TTLS, custom CA certificate, whatnot; the point is it's more ...
András Korn's user avatar
0 votes
0 answers
302 views

import pem file containing multiple CA certs

Using Samsung S4, Android 5.0.1, not rooted. Recently I have found at least two websites that the Chrome browser on Android 5.0.1 reports https is not secure. This is because the phone does not have ...
Scott R's user avatar
  • 121
14 votes
2 answers
35k views

How do I generate a PKCS12 CA certificate for use with Packet Capture?

I was trying to use Packet Capture app to find out some URLs used by an app. Packet Capture allows you to capture SSL packets by installing a VPN Gateway with its own root CA certificate and then ...
Kidburla's user avatar
  • 478
5 votes
3 answers
3k views

CA certificate somehow not taken by browsers on android

This is a follow up question related to this answer. In short: I am importing the self signed Root CA certificate into android system via Settings -> Security -> Trusted Credentials -> ...
user avatar
3 votes
1 answer
3k views

Why is user and CA certificate required for IKEv2 RSA VPN?

It should work similarly as to going to a random HTTPS website, where the supplied certificate is backed by a CA, and based on which a secure connection is made. Then authentication follows over the ...
Davor Josipovic's user avatar