Questions tagged [certificates]

A web infrastructure construct that facilitates the trust relationship between a web site as information provider and a client's web client (browser) as information consumer. It contains elements to satisfy authentication to satisfy requirements that parties to the connection are who they claim to be, and assist in handshaking for paired encryption methods to satisfy secure communication.

Filter by
Sorted by
Tagged with
0
votes
1answer
53 views

“Certificate not secure” error on Samsung Email app on Note 8

I have a Samsung Galaxy Note 8 (Android 9, One UI 1.0) and am using Samsung's Email app (which comes preloaded on Samsung phones) to access my work email. Recently I went abroad and had to rely on ...
0
votes
0answers
65 views

Why can't I find a CERT.RSA file in my Android APK?

I need to view the certificate of an Android APK, however when I look in the META-INF folder, there is no CERT.RSA file. I know that somehow the APK must be signed, because I was able to put it on an ...
0
votes
0answers
61 views

How can I get Chrome on Android validate a certificate for a local domain?

This issue does not occur on Windows nor macOS, only Android. I have a local server, which I access through a local domain name and zone, using a local DNS server. I have generated a SSL certificate ...
0
votes
0answers
208 views

Installing trusted certificate on android emulator(blustacks)

I'm tryung to install a trusted certificate on blustacks. I have a VPN in my local network that requires a trusted certificate on every machine that wants to access internet from it. I have ...
0
votes
0answers
72 views

Why I couldn't monitor traffic from this page?

When I opened the capture log I found nothing from the page other than this when I first tried to visit it using http only, and then I get that security warning and i click proceed to unsafe anyway i ...
0
votes
0answers
35 views

How can I accept a browser certificate when browsing on Chrome on Android?

I'm browsing an application that is installed on my intranet site. On the desktop chrome browser, I get a security error which I normally accept and the site starts working again. How can I achieve ...
0
votes
0answers
89 views

PEAP WiFi issues S8+

I just received a new S8+ and I am having issues connecting to the WiFi at my corporation. The WiFi needs to be authenticated using PEAP, but there is nothing for me to select under "CA Certificate", ...
1
vote
0answers
170 views

Marshmallow: Adding system-wide custom root certificate

On Android 6 if I move my own root CA from /data/misc/user/0/cacerts-added to /system/etc/security/cacerts/ it doesn't work anymore. It is in the system list and active, but my browser says ...
0
votes
1answer
196 views

Sniffing SSL/TLS connections with BURP

I want to sniff SSL/TLS encrypted traffic of my installed apps using BURP. After installing the burp certificate on my One Plus 5T and moving certificates through the Magisk tweak "Move Certificates" ...
1
vote
0answers
84 views

Mismatching certificate store and used certificates

About 2 weeks ago I've started to experience SSL errors on my Samsung Galaxy S8 (SM-G950F), in various applications (Google Play services, Netflix, Uber and also when browsing to certain HTTPS domains)...
0
votes
0answers
83 views

How to locate app which installed a potentially malicious certificate?

On my S8 (Oreo) today, I got the notification: There is a certificate installed that may or not monitor your internet traffic. Did spyware install itself? Or is this normal? I updated from 7.0 to 8....
1
vote
1answer
3k views

What is “com.samsung.android.dqagent_SA_SDK” user certificate? Is it safe?

My user certificates has the following: com.samsung.android.dqagent_SA_SDK. It seems so strange, it looks like someone put it on there. Is that normal?
0
votes
0answers
146 views

How to install system trusted CA certificate on Android without rooting [duplicate]

I need to install the firewall certificate on the devices of my company. Since I can't install a system trusted certificate without rooting the device I thought of creating an Android image that comes ...
0
votes
1answer
513 views

How do I install the OWASP ZAP certificate as a trusted system CA on Bluestacks?

I have a rooted bluestacks android. I would like to use ZAP to monitor its SSL traffic. I exported ZAP's SSL certificate as a .cer file ("----- BEGIN CERTIFICATE .... ------ END CERTIFICATE -------")....
2
votes
0answers
2k views

How to add a CA to trusted root

Since android 7, apps will not obey the user installed CA certificates anymore. So as a tester, if you want to test and verify issues such as certificate pinning you need to install the custom proxy ...
1
vote
1answer
8k views

No “Use system certificates” when trying to connect to WiFi

I am having a problem connecting to my university Eduroam WiFi. If I understand correctly, in CA certificate I am supposed to select CA certificate if it is there or Use system certificate and input ...
2
votes
1answer
1k views

How to install P12 certificates in mobile Firefox?

I successfully imported my .p12 certificate to my two android devices (Galaxy Tab E SM-T560 (Spreadtrum SoC) running Kitkat 4.4.4 and Xiaomi Mi A1 Global Version (SD 625)(was) running (Oreo 8.0.0) Pie ...
1
vote
0answers
67 views

Do older Android versions support SHA-256?

We are updating our certs. for our MDM program, and that includes rolling out SHA-256. That being said, do all Android versions support SHA-256 (especially 4.0.3 and 4.1.1)?
0
votes
1answer
128 views

Certificate expiry upcoming [closed]

Today my phone tells me that its certificate will expire in February 2018 What will happen to my phone when this date occurs? Do I need (a) to worry (b) to take pre-emptive action? ...
1
vote
0answers
627 views

Bypassing certificate pinning with integrity checks on Android 7 (Nougat) or newer

How can I bypass Certificate Pinning, or bypass SSL verification entirely, in an Android app on Android 7 or newer that has a built-in hash 'integrity check' to rule out APK modification? Here is a ...
1
vote
1answer
843 views

Can't install a new p12 user certificate

I can't import a new company-issued personal certificate in binary .p12 format. The old one worked fine, I have a new one (CA was updated so we had to be issued new ones) that fails the import. Both ...
-1
votes
1answer
1k views

How to lookup a specific security certificate on my phone?

I have been trying to find out which security ca certificate is which on my phone, when they are all active my phone runs really slow. Is there a way to find these certificates?
0
votes
0answers
578 views

Browsers crashing when trying to access captive portal (Wi-Fi log in page)

Recently I noticed that whenever I try to login to a captive portal Wi-Fi page, all of the browsers that I'm using crash. This happens before the page even finishes loading and consenquently I am ...
0
votes
1answer
406 views

How to accept SSL certificate using selenium on an emulated Android

I'm using selenium (with python) to test a website on an emulated android device (Android version 6 and Android version 5.1) on Sauce Labs. Selenium tries to access a website using the native ...
7
votes
2answers
584 views

How does Android handle wifi root CAs? Should they be a security concern?

My university requires me to install a custom root CA to connect to their wifi network. When I installed it on my phone, it let me specify "Wifi" or "VPN and apps". I chose wifi, and was able to ...
1
vote
0answers
185 views

Default trusted certificates

Is there a list default trusted certificates for a Nexus 6P? Are there lists for other devices? Is this a difficult seeing to track
1
vote
0answers
127 views

Removed trusted CA's now can't use Google…Anything!

My boyfriend accidently hit the 'Remove all stored credentials' and now he can not access anything Google, but most importantly the Play Store. OK it might have been on purpose, don't ask, but now it'...
1
vote
2answers
3k views

How to explain SSL cert validation discrepancy between Chrome and WebView on a modern Android?

(original title: Do some Android vendors ship their own SSL stack implementation?) We've been having (in production) a peculiar HTTPS-related issue lately in our Android app. All calls to our domain ...
0
votes
1answer
214 views

Re-sign APK to prevent updating - crashes “divide by zero”

I'm using an app that has been updated, but doesn't work on my phone on the current version. So I'm currently using an older one. But of course it always shows up with an update in the PlayStore. Now ...
2
votes
2answers
10k views

How to connect to PEAP MSCHAPv2 Wi-Fi using system certificates in Android 7.1 Nougat?

Android 7.1 has introduced some changes to Wi-Fi connection interface. In 6.0, when selecting PEAP MSCHAPv2 in Wi-Fi connection interface, there were no CA certificates available (unless some had been ...
1
vote
0answers
2k views

Install CA Certifcate using ADB?

I'm in an annoying chicken-and-the-egg loop. Android Browser (the stock browser) is rejecting a bunch of sites certified by Comodo certificate authority. I'm on Comodo's site trying to download their ...
1
vote
1answer
3k views

Android Root Certificates, published list?

For each version of iOS Apple publishes a list of the embedded root certificates: https://support.apple.com/en-us/HT205205 I am unable to find something similar for Android, I am wondering if these ...
0
votes
1answer
636 views

Platform Certificate

I am resigning apps on a system image in a manner similar to : Resigning System Image on a Device. What I am trying to figure out is how Android verify these apks. In the standard android build the ...
0
votes
1answer
496 views

No fingerprint reader after adding self signed certificate

Cyanogen OS 12.1 running on a ZUK z1. I added a self signed CA certificate to the "trusted credentials". Since then android doesn't allow me to use the fingerprint scanner to unlock the screen anymore....
5
votes
0answers
1k views

How to remember/cache a client certificate

I support a web-application that requires an https connection with client certificates as part of the authentication scheme. On most browsers (Desktop clients, iOS Safari, etc) if you are prompted for ...
2
votes
2answers
31k views

What are all these security certificates on new phone?

This is a new T-Mobile Samsung Galaxy S7. Is it normal to have all these certificates? Many look dodgy. Image resized. Click to see full-version
3
votes
1answer
10k views

How to remove a single client certificate?

Isn't it possible to remove a single client certificate from a device? On a Galaxy S6 running 5.0.2 I can remove all client certificates using: System settings Lock screen and security Other ...
3
votes
0answers
239 views

How do I tell Android to remember which client certificate to use for a given site?

I have a site that requires a client certificate in order to allow access. I've successfully installed a client certificate onto my Android device. When I access the site from Chrome, I'm prompted ...
1
vote
0answers
4k views

Can I export certificates from Credentials Storage

I have several certificates in the Credentials store that I would like to backup. Can they be extracted? OnePlus 2 running OxygenOS 2.2.0 Android 5.1.1 Not Rooted.
1
vote
0answers
684 views

How are certs validated against default trust store?

Through some reading, I have a fairly rough understanding about how https works with Android apps, especially how are certificate validations done. Some of the resources that I referred to for gaining ...
4
votes
0answers
964 views

Certificate Authority installation doesn't work

I've seen many many posts* lined to my problem, although none of them seems to refer to my bug. I set up my small PKI (for Web, mail etc.) and now try to import my CA .crt file to my Android device. ...
2
votes
1answer
194 views

Pop up about security problems

I had a lot of these pop ups and I don't know if it's for real or not.
1
vote
0answers
424 views

How to install a certificate to Work Profile user

I would like my app on Work Profile user (https://www.android.com/intl/en_us/work/) to connect to a server with a cert. Since Work Profile user shares Settings with Owner user, I installed a cert from ...
0
votes
1answer
106 views

Can't change security settings due to VPN setup

This appears to be a duplicate of this post, but the solution there didn't work for me. Clearing the credential storage wasn't even an option -- it's greyed out. Starting at the beginning -- I ...
-1
votes
2answers
321 views

Cannot change lock screen other than password/PIN after installing certificate

I am using XOLO Q1010i. In order to use the university WiFi network, I need to install an authority certificate (WiFi credential). To do so, the device made me installing a lock screen (PIN or ...
0
votes
1answer
2k views

Unable to accept SSL certificate (k9mail)

I am setting up k9mail on a 4.2 device (rooted Sony Xperia Mini Pro with stock ROM and crap removed) and it complains about the IMAP SSL certificate not being valid. This happens with both a self-...
1
vote
0answers
1k views

How to install a private key (.pfx certificate) on android?

I want to read a protected pdf file. I installed in on my Windows PC and install the .pfx certificate with the password to read it. There I can open it normally. But I can't do the same on my android ...
1
vote
0answers
460 views

is there a way to force chrome to accept a self signed site?

I want to access to a site in which zimbra is installed, the address is like 'https://...', but when I try to access it from chrome on my phone I have a message telling me the connection is not ...
3
votes
1answer
399 views

Problem importing server certificate to CyanogenMod 9.1

I am having trouble importing a self signed server certificate to my Sony Ericsson Xperia Arc S running CyanogenMod 9.1. I have tried everything that came to mind. First, the usual method: ...
0
votes
1answer
5k views

How to resolve “enter the password for credential storage” issue?

So I am playing around with fiddler web proxy. I need to decrypt https traffic. So I am trying to put the fiddler root CA cert in my device trust store. But it keeps asking me "Enter the password for ...