Questions tagged [certificates]

A web infrastructure construct that facilitates the trust relationship between a web site as information provider and a client's web client (browser) as information consumer. It contains elements to satisfy authentication to satisfy requirements that parties to the connection are who they claim to be, and assist in handshaking for paired encryption methods to satisfy secure communication.

Filter by
Sorted by
Tagged with
1
vote
0answers
27 views

Exporting a CA certificate from Android to Android?

I'm trying to install an openssl CA certificate on my Pixel 5, previously I was able to install it directly through the app I was using on my old Pixel 2 but with the new security measures this is no ...
1
vote
0answers
936 views

No option to choose “Do Not Validate” under “CA certificates” when connecting to PEAP/MSCHAPV2 WiFi (Android 11)

I can't connect to campus WiFi anymore after installing latest ROM with december 2020 security patches. The configuration is PEAP/MSCHAPV2. Under CA certificate, we usually choose "Do not ...
2
votes
1answer
95 views

Can I enroll my device in Android Enterprise to install a root CA?

My phone can't be rooted but I want to MITM my own traffic. Is there any downside to enrolling my device as a managed enterprise device and installing a certificate through the program? It seems ...
6
votes
1answer
116 views

Let's Encrypt: Is there a workaround for the 2021 SSL “cutoff” for pre-7.1.1 Android devices?

In January 2021 all devices with Android prior to 7.1.1 will not be able to connect to HTTPS servers using Let's Encrypt certificate (Let's Encrypt blog post explaining the details) Is there any ...
0
votes
0answers
33 views

Checking Android Certificates

I recently purchased a Galaxy A51. I noticed certificates that were located in the Credntial Storage in User Certificates. 10164_KNOX_Enhacened_Attestation Enhacened_Attestation_SSL FindMyMobile Are ...
0
votes
0answers
59 views

Install Self Signed SSL Certificate on Android 9.0

I am hosting a website on my LAN and its running on HTTPS via a self signed certificate. On my other windows devices i have added this self signed certificate as a Trusted Root Certification ...
0
votes
0answers
28 views

How to setup a VPN certificate

Is it possible to setup a VPN certificate in Android 10 , without using an external apps (like openvpn) ?
0
votes
0answers
71 views

Android 10 user CA file not being used in apps

I'm using an ISP that does internet filtering for me, I have install their CA file, and it works in the browser, and used to work in all apps. After the latest update for Xiaomi Redmi Pro 9, Youtube, ...
0
votes
0answers
48 views

How can I copy specific wifi networks from one Android device to another?

I have a rooted Android 7.1.1 phone with a large number of wireless networks configured; some of these are relatively complicated (EAP-TTLS, custom CA certificate, whatnot; the point is it's more ...
0
votes
0answers
47 views

import pem file containing multiple CA certs

Using Samsung S4, Android 5.0.1, not rooted. Recently I have found at least two websites that the Chrome browser on Android 5.0.1 reports https is not secure. This is because the phone does not have ...
0
votes
0answers
58 views

How to convert certificate to be used in Android

I have generated a public - private keypair (CA is true) using the following code: openssl genrsa -out private.key 3072 openssl req -new -sha256 -out keys.csr -key private.key openssl x509 -...
0
votes
0answers
11 views

Certificate selection screen not displaying

The phone is updated to the latest version, along with all the apps. I am trying to sign in to webex teams, but the issue I am having is, after I have entered my login details & then get taken to ...
2
votes
0answers
4k views

How do I generate a PKCS12 CA certificate for use with Packet Capture?

I was trying to use Packet Capture app to find out some URLs used by an app. Packet Capture allows you to capture SSL packets by installing a VPN Gateway with its own root CA certificate and then ...
1
vote
1answer
206 views

CA certificate somehow not taken by browsers on android

This is a follow up question related to this answer. In short: I am importing the self signed Root CA certificate into android system via Settings -> Security -> Trusted Credentials -> ...
0
votes
0answers
42 views

Oneplus 6 failing to install personal client-side certificates

I have a rooted Oneplus 6 running Oxygen OS and I am trying to install a personal certificate onto my phone to act as verification for my web server. I have a CA that I use to sign the certificates ...
3
votes
1answer
531 views

Why is user and CA certificate required for IKEv2 RSA VPN?

It should work similarly as to going to a random HTTPS website, where the supplied certificate is backed by a CA, and based on which a secure connection is made. Then authentication follows over the ...
0
votes
0answers
179 views

Android emulator - put certificate in /system path

I want to sniff the websockets (ssl) webtraffic of an Android app by using Mitmproxy. Because Android (>=7) by default makes apps not trust user certificates anymore, my plan is to put my Mitmproxy ...
1
vote
1answer
183 views

How to inspect HTTPS traffic of a third-party app on Android 9+

I want to inspect inside HTTPS-encrypted packets that an app is sending. It is not my app, I don't have its source code. My device is rooted, so I can modify /system/etc/security/cacert if needed, ...
0
votes
0answers
135 views

Connecting to own proxy with self-made CA certificate not (properly) working

I have a Squid proxy installed with HTTPS/SSL support. When I install the generated CA certificate in Firefox and set the proxy, everything looks good -- that is, I can see all the HTTP(S) requests ...
0
votes
0answers
4k views

“Certificate not secure” error on Samsung Email app on Note 8

I have a Samsung Galaxy Note 8 (Android 9, One UI 1.0) and am using Samsung's Email app (which comes preloaded on Samsung phones) to access my work email. Recently I went abroad and had to rely on ...
0
votes
2answers
572 views

Why can't I find a CERT.RSA file in my Android APK?

I need to view the certificate of an Android APK, however when I look in the META-INF folder, there is no CERT.RSA file. I know that somehow the APK must be signed, because I was able to put it on an ...
0
votes
0answers
96 views

Why I couldn't monitor traffic from this page?

When I opened the capture log I found nothing from the page other than this when I first tried to visit it using http only, and then I get that security warning and i click proceed to unsafe anyway i ...
1
vote
0answers
206 views

Marshmallow: Adding system-wide custom root certificate

On Android 6 if I move my own root CA from /data/misc/user/0/cacerts-added to /system/etc/security/cacerts/ it doesn't work anymore. It is in the system list and active, but my browser says ...
0
votes
1answer
403 views

Sniffing SSL/TLS connections with BURP

I want to sniff SSL/TLS encrypted traffic of my installed apps using BURP. After installing the burp certificate on my One Plus 5T and moving certificates through the Magisk tweak "Move Certificates" ...
0
votes
0answers
133 views

How to locate app which installed a potentially malicious certificate?

On my S8 (Oreo) today, I got the notification: There is a certificate installed that may or not monitor your internet traffic. Did spyware install itself? Or is this normal? I updated from 7.0 to 8....
1
vote
1answer
6k views

What is “com.samsung.android.dqagent_SA_SDK” user certificate? Is it safe?

My user certificates has the following: com.samsung.android.dqagent_SA_SDK. It seems so strange, it looks like someone put it on there. Is that normal?
0
votes
0answers
409 views

How to install system trusted CA certificate on Android without rooting [duplicate]

I need to install the firewall certificate on the devices of my company. Since I can't install a system trusted certificate without rooting the device I thought of creating an Android image that comes ...
0
votes
1answer
1k views

How do I install the OWASP ZAP certificate as a trusted system CA on Bluestacks?

I have a rooted bluestacks android. I would like to use ZAP to monitor its SSL traffic. I exported ZAP's SSL certificate as a .cer file ("----- BEGIN CERTIFICATE .... ------ END CERTIFICATE -------")....
4
votes
0answers
3k views

How to add a CA to trusted root

Since android 7, apps will not obey the user installed CA certificates anymore. So as a tester, if you want to test and verify issues such as certificate pinning you need to install the custom proxy ...
3
votes
2answers
12k views

No “Use system certificates” when trying to connect to WiFi

I am having a problem connecting to my university Eduroam WiFi. If I understand correctly, in CA certificate I am supposed to select CA certificate if it is there or Use system certificate and input ...
2
votes
1answer
2k views

How to install P12 certificates in mobile Firefox?

I successfully imported my .p12 certificate to my two android devices (Galaxy Tab E SM-T560 (Spreadtrum SoC) running Kitkat 4.4.4 and Xiaomi Mi A1 Global Version (SD 625)(was) running (Oreo 8.0.0) Pie ...
1
vote
0answers
89 views

Do older Android versions support SHA-256?

We are updating our certs. for our MDM program, and that includes rolling out SHA-256. That being said, do all Android versions support SHA-256 (especially 4.0.3 and 4.1.1)?
0
votes
1answer
347 views

Certificate expiry upcoming [closed]

Today my phone tells me that its certificate will expire in February 2018 What will happen to my phone when this date occurs? Do I need (a) to worry (b) to take pre-emptive action? ...
1
vote
0answers
731 views

Bypassing certificate pinning with integrity checks on Android 7 (Nougat) or newer

How can I bypass Certificate Pinning, or bypass SSL verification entirely, in an Android app on Android 7 or newer that has a built-in hash 'integrity check' to rule out APK modification? Here is a ...
1
vote
1answer
1k views

Can't install a new p12 user certificate

I can't import a new company-issued personal certificate in binary .p12 format. The old one worked fine, I have a new one (CA was updated so we had to be issued new ones) that fails the import. Both ...
-1
votes
1answer
2k views

How to lookup a specific security certificate on my phone?

I have been trying to find out which security ca certificate is which on my phone, when they are all active my phone runs really slow. Is there a way to find these certificates?
0
votes
0answers
626 views

Browsers crashing when trying to access captive portal (Wi-Fi log in page)

Recently I noticed that whenever I try to login to a captive portal Wi-Fi page, all of the browsers that I'm using crash. This happens before the page even finishes loading and consenquently I am ...
0
votes
1answer
459 views

How to accept SSL certificate using selenium on an emulated Android

I'm using selenium (with python) to test a website on an emulated android device (Android version 6 and Android version 5.1) on Sauce Labs. Selenium tries to access a website using the native ...
7
votes
2answers
841 views

How does Android handle wifi root CAs? Should they be a security concern?

My university requires me to install a custom root CA to connect to their wifi network. When I installed it on my phone, it let me specify "Wifi" or "VPN and apps". I chose wifi, and was able to ...
1
vote
0answers
192 views

Default trusted certificates

Is there a list default trusted certificates for a Nexus 6P? Are there lists for other devices? Is this a difficult seeing to track
1
vote
0answers
131 views

Removed trusted CA's now can't use Google…Anything!

My boyfriend accidently hit the 'Remove all stored credentials' and now he can not access anything Google, but most importantly the Play Store. OK it might have been on purpose, don't ask, but now it'...
2
votes
2answers
3k views

How to explain SSL cert validation discrepancy between Chrome and WebView on a modern Android?

(original title: Do some Android vendors ship their own SSL stack implementation?) We've been having (in production) a peculiar HTTPS-related issue lately in our Android app. All calls to our domain ...
0
votes
1answer
237 views

Re-sign APK to prevent updating - crashes “divide by zero”

I'm using an app that has been updated, but doesn't work on my phone on the current version. So I'm currently using an older one. But of course it always shows up with an update in the PlayStore. Now ...
4
votes
2answers
15k views

How to connect to PEAP MSCHAPv2 Wi-Fi using system certificates in Android 7.1 Nougat?

Android 7.1 has introduced some changes to Wi-Fi connection interface. In 6.0, when selecting PEAP MSCHAPv2 in Wi-Fi connection interface, there were no CA certificates available (unless some had been ...
1
vote
0answers
2k views

Install CA Certifcate using ADB?

I'm in an annoying chicken-and-the-egg loop. Android Browser (the stock browser) is rejecting a bunch of sites certified by Comodo certificate authority. I'm on Comodo's site trying to download their ...
2
votes
1answer
4k views

Android Root Certificates, published list?

For each version of iOS Apple publishes a list of the embedded root certificates: https://support.apple.com/en-us/HT205205 I am unable to find something similar for Android, I am wondering if these ...
0
votes
1answer
832 views

Platform Certificate

I am resigning apps on a system image in a manner similar to : Resigning System Image on a Device. What I am trying to figure out is how Android verify these apks. In the standard android build the ...
0
votes
1answer
501 views

No fingerprint reader after adding self signed certificate

Cyanogen OS 12.1 running on a ZUK z1. I added a self signed CA certificate to the "trusted credentials". Since then android doesn't allow me to use the fingerprint scanner to unlock the screen anymore....
5
votes
0answers
2k views

How to remember/cache a client certificate

I support a web-application that requires an https connection with client certificates as part of the authentication scheme. On most browsers (Desktop clients, iOS Safari, etc) if you are prompted for ...
2
votes
2answers
38k views

What are all these security certificates on new phone?

This is a new T-Mobile Samsung Galaxy S7. Is it normal to have all these certificates? Many look dodgy. Image resized. Click to see full-version