Questions tagged [certificates]

A web infrastructure construct that facilitates the trust relationship between a web site as information provider and a client's web client (browser) as information consumer. It contains elements to satisfy authentication to satisfy requirements that parties to the connection are who they claim to be, and assist in handshaking for paired encryption methods to satisfy secure communication.

Filter by
Sorted by
Tagged with
1 vote
0 answers
29 views

Legacy Android 4.0 CA-Certificates Update

I have two legacy Android 4.0 Garmin Monterra devices. It's not possible anymore to open the google play store or some websites. When I open most of the websites with chrome I receive a SSL error 107. ...
user avatar
  • 11
1 vote
0 answers
277 views

Cannot install certificates. Error: "Private key required to install a certificate"

I am trying to download and install a certificate to use my workplace's wifi. I have a Pixel 2 running Android 11. I took these steps to install the certificate as intended: I Download the file, go ...
user avatar
  • 11
0 votes
1 answer
369 views

Can't select CA certificate

Even after installing a CA certificate, I am not able to select it in the network configuration. I just get this message "CA certificate must be selected" but I can't find where I can do it. ...
user avatar
0 votes
1 answer
96 views

Unable to install P12 certificate in Android 8.1.0

I am using an LG Aristo 2 Plus, Android 8.1.0, and have a CA and client certificate to use for a wifi network. I have downloaded the certificates onto my phone and when I attempt to install them ...
user avatar
  • 103
3 votes
1 answer
338 views

How can I import a Root CA that's trusted by Chrome on Android 11

I have a Root CA (airgapped, openssl) that I use for a lot of internal lab projects. In the past, I've just imported the CA cert into the User credentials store on Android and the system began ...
user avatar
1 vote
1 answer
90 views

Capture TLS handshake

I would like to capture TLS handshakes coming from Android. I was able to install a certificate using this instruction, then I started a server: openssl s_server -key my_site.key -cert my_site.crt -...
user avatar
  • 63
0 votes
0 answers
30 views

Android 7 breaks certificates on Samsung Browser and in Whatsapp

On a Samsung S6 Plus Edge running on Android 7, certain security certificates will break since September 2021: the workaround which Let's Encrypt implemented doesn't seem to work in Samsung Internet. ...
user avatar
  • 101
2 votes
0 answers
60 views

Certificates and deadlines

Scope: mobile - Android Subject: Let's Encrypt certificate, ISRG Root X1 Hi, as Internet veterans know well, this certificate has expired since September 30th. Many "obsolete" devices have ...
user avatar
  • 165
1 vote
1 answer
80 views

Decrypting a user private key cert in keystore

Would like to ask if it is possible to decrypt the user private key store found in android keystore. I know that you need the masterkey to decrypt it. But is it possible to obtain the masterkey from a ...
user avatar
3 votes
1 answer
3k views

Make SSL certificate trusted by Chrome for Android

I want Chrome to trust an SSL certificate. How do I add this certificate or its issuing authority to the system or browser so that Chrome will not generate an error upon trying to access the website ...
user avatar
  • 605
1 vote
0 answers
29 views

Revoking Certificates for VPN Connection

would like to ask what happens when you press on the clear credentials options during an established always-on VPN connection. As I came across a situation where: The CA certificated was installed on ...
user avatar
3 votes
1 answer
61 views

How can I get back lost internet access on Android 4.x or lower?

I have an Acer A500 tablet running Android 4.0.3. Trying this after not using for some time I find it can't access most websites, getting "Webpage not available" in Opera Mini browser. I ...
user avatar
  • 31
0 votes
0 answers
989 views

How do I make Android 11 stop removing a Wi-Fi certificate?

I'm using a Google Pixel 3a. A week ago, it was connecting all well to the corporate Wi-Fi which uses WPA Enterprise, but recently, it stopped. In order to connect, I do the following: Download the ...
user avatar
3 votes
1 answer
11k views

How to get Android 11 to trust a user root CA without a private key?

I'm trying to install a new user root CA certificate in DER form (.crt file) on Android 11, without much success. The previous (expired) CA certificate worked just fine from an earlier install on a ...
user avatar
  • 365
1 vote
0 answers
35 views

app keystore and certs in phone storage?

is there method to view and export files from phone storage keystore? the android app i got has the keystore to managed digital user certs, it can be viewed via UI, i wanted to view them in phone ...
user avatar
  • 11
0 votes
1 answer
41 views

Cannot Enable Certificates

I've got a Samsung Galaxy J3 Prime running Oreo 8.1 that is getting NET::ERR_CERT_AUTHORITY_INVALID on literally every website, regardless of browser. When I check the security certificates (Settings ...
user avatar
0 votes
0 answers
29 views

Android 7.1 certificates are going to expire, anyway to renew them? [duplicate]

starting from September android 7.1 and below users are going to have issues with the internet so is there anyway to renew those certificates so i can use my phone properly?
user avatar
0 votes
0 answers
60 views

Applications on Android are not using Certificate Pinning

I'm doing a study for university and part of this study is to gather a group of android applications and check which of these applications use Cert Pinning. I am doing this by using fiddler as a proxy(...
user avatar
4 votes
2 answers
4k views

Android 11 does not trust a theoretically properly imported private CA for WiFi EAP-TLS

This question is similar, but unrelated to this one answered two days ago. I have been using WiFi EAP-TLS at home, for nearly a full year, with multiple desktop operating systems and Android 10 with ...
user avatar
1 vote
0 answers
467 views

Exporting a CA certificate from Android to Android?

I'm trying to install an openssl CA certificate on my Pixel 5, previously I was able to install it directly through the app I was using on my old Pixel 2 but with the new security measures this is no ...
user avatar
  • 11
9 votes
4 answers
21k views

No option to choose "Do Not Validate" under "CA certificates" when connecting to PEAP/MSCHAPV2 WiFi (Android 11)

I can't connect to campus WiFi anymore after installing latest ROM with december 2020 security patches. The configuration is PEAP/MSCHAPV2. Under CA certificate, we usually choose "Do not ...
user avatar
3 votes
1 answer
666 views

Can I enroll my device in Android Enterprise to install a root CA?

My phone can't be rooted but I want to MITM my own traffic. Is there any downside to enrolling my device as a managed enterprise device and installing a certificate through the program? It seems ...
user avatar
  • 569
9 votes
1 answer
1k views

Let's Encrypt: Is there a workaround for the 2021 SSL "cutoff" for pre-7.1.1 Android devices?

In January 2021 all devices with Android prior to 7.1.1 will not be able to connect to HTTPS servers using Let's Encrypt certificate (Let's Encrypt blog post explaining the details) Is there any ...
user avatar
0 votes
0 answers
265 views

Android 10 user CA file not being used in apps

I'm using an ISP that does internet filtering for me, I have install their CA file, and it works in the browser, and used to work in all apps. After the latest update for Xiaomi Redmi Pro 9, Youtube, ...
user avatar
0 votes
0 answers
257 views

How can I copy specific wifi networks from one Android device to another?

I have a rooted Android 7.1.1 phone with a large number of wireless networks configured; some of these are relatively complicated (EAP-TTLS, custom CA certificate, whatnot; the point is it's more ...
user avatar
0 votes
0 answers
162 views

import pem file containing multiple CA certs

Using Samsung S4, Android 5.0.1, not rooted. Recently I have found at least two websites that the Chrome browser on Android 5.0.1 reports https is not secure. This is because the phone does not have ...
user avatar
  • 121
9 votes
1 answer
21k views

How do I generate a PKCS12 CA certificate for use with Packet Capture?

I was trying to use Packet Capture app to find out some URLs used by an app. Packet Capture allows you to capture SSL packets by installing a VPN Gateway with its own root CA certificate and then ...
user avatar
  • 378
2 votes
2 answers
2k views

CA certificate somehow not taken by browsers on android

This is a follow up question related to this answer. In short: I am importing the self signed Root CA certificate into android system via Settings -> Security -> Trusted Credentials -> ...
user avatar
3 votes
1 answer
2k views

Why is user and CA certificate required for IKEv2 RSA VPN?

It should work similarly as to going to a random HTTPS website, where the supplied certificate is backed by a CA, and based on which a secure connection is made. Then authentication follows over the ...
user avatar
1 vote
1 answer
505 views

How to inspect HTTPS traffic of a third-party app on Android 9+

I want to inspect inside HTTPS-encrypted packets that an app is sending. It is not my app, I don't have its source code. My device is rooted, so I can modify /system/etc/security/cacert if needed, ...
user avatar
0 votes
0 answers
337 views

Connecting to own proxy with self-made CA certificate not (properly) working

I have a Squid proxy installed with HTTPS/SSL support. When I install the generated CA certificate in Firefox and set the proxy, everything looks good -- that is, I can see all the HTTP(S) requests ...
user avatar
  • 101
0 votes
0 answers
4k views

"Certificate not secure" error on Samsung Email app on Note 8

I have a Samsung Galaxy Note 8 (Android 9, One UI 1.0) and am using Samsung's Email app (which comes preloaded on Samsung phones) to access my work email. Recently I went abroad and had to rely on ...
user avatar
0 votes
2 answers
2k views

Why can't I find a CERT.RSA file in my Android APK?

I need to view the certificate of an Android APK, however when I look in the META-INF folder, there is no CERT.RSA file. I know that somehow the APK must be signed, because I was able to put it on an ...
user avatar
0 votes
0 answers
146 views

Why I couldn't monitor traffic from this page?

When I opened the capture log I found nothing from the page other than this when I first tried to visit it using http only, and then I get that security warning and i click proceed to unsafe anyway i ...
user avatar
1 vote
0 answers
252 views

Marshmallow: Adding system-wide custom root certificate

On Android 6 if I move my own root CA from /data/misc/user/0/cacerts-added to /system/etc/security/cacerts/ it doesn't work anymore. It is in the system list and active, but my browser says ...
user avatar
0 votes
1 answer
590 views

Sniffing SSL/TLS connections with BURP

I want to sniff SSL/TLS encrypted traffic of my installed apps using BURP. After installing the burp certificate on my One Plus 5T and moving certificates through the Magisk tweak "Move Certificates" ...
user avatar
0 votes
0 answers
202 views

How to locate app which installed a potentially malicious certificate?

On my S8 (Oreo) today, I got the notification: There is a certificate installed that may or not monitor your internet traffic. Did spyware install itself? Or is this normal? I updated from 7.0 to 8....
user avatar
  • 1,015
1 vote
1 answer
7k views

What is "com.samsung.android.dqagent_SA_SDK" user certificate? Is it safe?

My user certificates has the following: com.samsung.android.dqagent_SA_SDK. It seems so strange, it looks like someone put it on there. Is that normal?
user avatar
  • 11
0 votes
0 answers
648 views

How to install system trusted CA certificate on Android without rooting [duplicate]

I need to install the firewall certificate on the devices of my company. Since I can't install a system trusted certificate without rooting the device I thought of creating an Android image that comes ...
user avatar
0 votes
1 answer
2k views

How do I install the OWASP ZAP certificate as a trusted system CA on Bluestacks?

I have a rooted Bluestacks Android. I would like to use ZAP to monitor its SSL traffic. I exported ZAP's SSL certificate as a .cer file -----BEGIN CERTIFICATE----- ... -----END CERTIFICATE----- Now I ...
user avatar
4 votes
0 answers
4k views

How to add a CA to trusted root

Since android 7, apps will not obey the user installed CA certificates anymore. So as a tester, if you want to test and verify issues such as certificate pinning you need to install the custom proxy ...
user avatar
5 votes
2 answers
21k views

No "Use system certificates" when trying to connect to WiFi

I am having a problem connecting to my university Eduroam WiFi. If I understand correctly, in CA certificate I am supposed to select CA certificate if it is there or Use system certificate and input ...
user avatar
2 votes
1 answer
3k views

How to install P12 certificates in mobile Firefox?

I successfully imported my .p12 certificate to my two android devices (Galaxy Tab E SM-T560 (Spreadtrum SoC) running Kitkat 4.4.4 and Xiaomi Mi A1 Global Version (SD 625)(was) running (Oreo 8.0.0) Pie ...
user avatar
  • 159
1 vote
0 answers
113 views

Do older Android versions support SHA-256?

We are updating our certs. for our MDM program, and that includes rolling out SHA-256. That being said, do all Android versions support SHA-256 (especially 4.0.3 and 4.1.1)?
user avatar
0 votes
1 answer
767 views

Certificate expiry upcoming [closed]

Today my phone tells me that its certificate will expire in February 2018 What will happen to my phone when this date occurs? Do I need (a) to worry (b) to take pre-emptive action? ...
user avatar
1 vote
0 answers
825 views

Bypassing certificate pinning with integrity checks on Android 7 (Nougat) or newer

How can I bypass Certificate Pinning, or bypass SSL verification entirely, in an Android app on Android 7 or newer that has a built-in hash 'integrity check' to rule out APK modification? Here is a ...
user avatar
  • 111
2 votes
1 answer
2k views

Can't install a new p12 user certificate

I can't import a new company-issued personal certificate in binary .p12 format. The old one worked fine, I have a new one (CA was updated so we had to be issued new ones) that fails the import. Both ...
user avatar
  • 121
-1 votes
1 answer
2k views

How to lookup a specific security certificate on my phone?

I have been trying to find out which security ca certificate is which on my phone, when they are all active my phone runs really slow. Is there a way to find these certificates?
user avatar
  • 1
0 votes
0 answers
720 views

Browsers crashing when trying to access captive portal (Wi-Fi log in page)

Recently I noticed that whenever I try to login to a captive portal Wi-Fi page, all of the browsers that I'm using crash. This happens before the page even finishes loading and consenquently I am ...
user avatar
0 votes
1 answer
508 views

How to accept SSL certificate using selenium on an emulated Android

I'm using selenium (with python) to test a website on an emulated android device (Android version 6 and Android version 5.1) on Sauce Labs. Selenium tries to access a website using the native ...
user avatar