Questions tagged [certificates]

A web infrastructure construct that facilitates the trust relationship between a web site as information provider and a client's web client (browser) as information consumer. It contains elements to satisfy authentication to satisfy requirements that parties to the connection are who they claim to be, and assist in handshaking for paired encryption methods to satisfy secure communication.

Filter by
Sorted by
Tagged with
0
votes
0answers
14 views

Oneplus 6 failing to install personal client-side certificates

I have a rooted Oneplus 6 running Oxygen OS and I am trying to install a personal certificate onto my phone to act as verification for my web server. I have a CA that I use to sign the certificates ...
3
votes
1answer
82 views

Why is user and CA certificate required for IKEv2 RSA VPN?

It should work similarly as to going to a random HTTPS website, where the supplied certificate is backed by a CA, and based on which a secure connection is made. Then authentication follows over the ...
0
votes
1answer
847 views

How do I install the OWASP ZAP certificate as a trusted system CA on Bluestacks?

I have a rooted bluestacks android. I would like to use ZAP to monitor its SSL traffic. I exported ZAP's SSL certificate as a .cer file ("----- BEGIN CERTIFICATE .... ------ END CERTIFICATE -------")....
0
votes
0answers
3k views

“Certificate not secure” error on Samsung Email app on Note 8

I have a Samsung Galaxy Note 8 (Android 9, One UI 1.0) and am using Samsung's Email app (which comes preloaded on Samsung phones) to access my work email. Recently I went abroad and had to rely on ...
0
votes
1answer
262 views

Why can't I find a CERT.RSA file in my Android APK?

I need to view the certificate of an Android APK, however when I look in the META-INF folder, there is no CERT.RSA file. I know that somehow the APK must be signed, because I was able to put it on an ...
0
votes
1answer
4k views

'Could not validate certificate signature' error (Antennapod, Gingerbread)

I am using Android 2.3.6 (Gingerbread) and AntennaPod Version 0.9.9.5. When I am trying to access gpodder.net, either to login or search podcasts, I get the following error message: An error occured:...
1
vote
1answer
5k views

What is “com.samsung.android.dqagent_SA_SDK” user certificate? Is it safe?

My user certificates has the following: com.samsung.android.dqagent_SA_SDK. It seems so strange, it looks like someone put it on there. Is that normal?
0
votes
0answers
30 views

Android emulator - put certificate in /system path

I want to sniff the websockets (ssl) webtraffic of an Android app by using Mitmproxy. Because Android (>=7) by default makes apps not trust user certificates anymore, my plan is to put my Mitmproxy ...
3
votes
1answer
10k views

How to remove a single client certificate?

Isn't it possible to remove a single client certificate from a device? On a Galaxy S6 running 5.0.2 I can remove all client certificates using: System settings Lock screen and security Other ...
4
votes
1answer
11k views

Getting latest update of certificate/credential/ssl store

Hy, I realize sometimes when browsing with https shows the certificate is not valid "This certificate is not from a trusted authority", clicking continue will just poping up the same warning. That ...
2
votes
1answer
816 views

Save accepted untrusted certificates on email app (HTC Sensation)

I have a problem with the mail (not gmail) app on my HTC Sensation, that I'm guessing is part of HTC Sense 3. I'm using a server that has an untrusted certificate, and every time I try to refresh my ...
1
vote
2answers
890 views

Is there a in-built setting to login to public hotspots?

I have a SIM-lock free Galaxy W with Android 2.3.6 on it. The other day in the public library I found out that I was not able to login anyhow to the public Wi-Fi. It shows that the DHCP gives the ...
0
votes
1answer
40 views

How to inspect HTTPS traffic of a third-party app on Android 9+

I want to inspect inside HTTPS-encrypted packets that an app is sending. It is not my app, I don't have its source code. My device is rooted, so I can modify /system/etc/security/cacert if needed, ...
0
votes
0answers
58 views

Connecting to own proxy with self-made CA certificate not (properly) working

I have a Squid proxy installed with HTTPS/SSL support. When I install the generated CA certificate in Firefox and set the proxy, everything looks good -- that is, I can see all the HTTP(S) requests ...
0
votes
1answer
319 views

Sniffing SSL/TLS connections with BURP

I want to sniff SSL/TLS encrypted traffic of my installed apps using BURP. After installing the burp certificate on my One Plus 5T and moving certificates through the Magisk tweak "Move Certificates" ...
2
votes
1answer
4k views

Android Root Certificates, published list?

For each version of iOS Apple publishes a list of the embedded root certificates: https://support.apple.com/en-us/HT205205 I am unable to find something similar for Android, I am wondering if these ...
0
votes
0answers
283 views

Install SSL certificate manually with root

I'm trying to install SSL certificate required by the HttpCanary app, but when I enter my PIN to install it, the PIN just keeps popping up indefinitely and I can't install it. So is there a way to ...
2
votes
1answer
9k views

No “Use system certificates” when trying to connect to WiFi

I am having a problem connecting to my university Eduroam WiFi. If I understand correctly, in CA certificate I am supposed to select CA certificate if it is there or Use system certificate and input ...
0
votes
0answers
127 views

PEAP WiFi issues S8+

I just received a new S8+ and I am having issues connecting to the WiFi at my corporation. The WiFi needs to be authenticated using PEAP, but there is nothing for me to select under "CA Certificate", ...
0
votes
0answers
88 views

How can I get Chrome on Android validate a certificate for a local domain?

This issue does not occur on Windows nor macOS, only Android. I have a local server, which I access through a local domain name and zone, using a local DNS server. I have generated a SSL certificate ...
21
votes
3answers
44k views

How do I install a user certificate?

I have my own Root certificate that signs user certificates. I have a site that will only allow you on with a user certificate which is signed by the root ca. I have managed to get this site working ...
0
votes
0answers
452 views

Installing trusted certificate on android emulator(blustacks)

I'm tryung to install a trusted certificate on blustacks. I have a VPN in my local network that requires a trusted certificate on every machine that wants to access internet from it. I have ...
10
votes
3answers
72k views

How to install a web certificate on an Android device?

To gain access to WIFI at university I have to login with my user/pass credentials. The certificate of their website (the local home page that asks for the credentials) is not recognized as a trusted ...
0
votes
0answers
84 views

Why I couldn't monitor traffic from this page?

When I opened the capture log I found nothing from the page other than this when I first tried to visit it using http only, and then I get that security warning and i click proceed to unsafe anyway i ...
14
votes
1answer
21k views

How to export SSL certificate from Android, Chrome

I have a Nexus 5 with the latest Android 4.4.2. I'm registered on using Chrome . They use client certificates to authenticate the user. I installed the certificate and could successfully use the site ...
0
votes
0answers
43 views

How can I accept a browser certificate when browsing on Chrome on Android?

I'm browsing an application that is installed on my intranet site. On the desktop chrome browser, I get a security error which I normally accept and the site starts working again. How can I achieve ...
1
vote
0answers
188 views

Marshmallow: Adding system-wide custom root certificate

On Android 6 if I move my own root CA from /data/misc/user/0/cacerts-added to /system/etc/security/cacerts/ it doesn't work anymore. It is in the system list and active, but my browser says ...
1
vote
0answers
94 views

Mismatching certificate store and used certificates

About 2 weeks ago I've started to experience SSL errors on my Samsung Galaxy S8 (SM-G950F), in various applications (Google Play services, Netflix, Uber and also when browsing to certain HTTPS domains)...
0
votes
0answers
105 views

How to locate app which installed a potentially malicious certificate?

On my S8 (Oreo) today, I got the notification: There is a certificate installed that may or not monitor your internet traffic. Did spyware install itself? Or is this normal? I updated from 7.0 to 8....
2
votes
1answer
2k views

How to install P12 certificates in mobile Firefox?

I successfully imported my .p12 certificate to my two android devices (Galaxy Tab E SM-T560 (Spreadtrum SoC) running Kitkat 4.4.4 and Xiaomi Mi A1 Global Version (SD 625)(was) running (Oreo 8.0.0) Pie ...
3
votes
2answers
11k views

How to connect to PEAP MSCHAPv2 Wi-Fi using system certificates in Android 7.1 Nougat?

Android 7.1 has introduced some changes to Wi-Fi connection interface. In 6.0, when selecting PEAP MSCHAPv2 in Wi-Fi connection interface, there were no CA certificates available (unless some had been ...
61
votes
8answers
270k views

How do you import CA certificates onto an Android phone?

I want to connect to my University's wireless using my Nexus One. When I go to "Add Wi-Fi network" in Wireless Settings I fill in the Network SSID and select 802.1x Enterprise for the security and ...
0
votes
0answers
258 views

How to install system trusted CA certificate on Android without rooting [duplicate]

I need to install the firewall certificate on the devices of my company. Since I can't install a system trusted certificate without rooting the device I thought of creating an Android image that comes ...
0
votes
0answers
607 views

Browsers crashing when trying to access captive portal (Wi-Fi log in page)

Recently I noticed that whenever I try to login to a captive portal Wi-Fi page, all of the browsers that I'm using crash. This happens before the page even finishes loading and consenquently I am ...
2
votes
3answers
10k views

Where to get OpenSSL binary for Android?

I have a Nexus 10 (unlocked & rooted) and I wanted to get the openssl binary on there so I can verify HTTPS certificates: $ openssl s_client -connect <IPADDRESS> However, no matter what I ...
3
votes
0answers
3k views

How to add a CA to trusted root

Since android 7, apps will not obey the user installed CA certificates anymore. So as a tester, if you want to test and verify issues such as certificate pinning you need to install the custom proxy ...
2
votes
2answers
34k views

What are all these security certificates on new phone?

This is a new T-Mobile Samsung Galaxy S7. Is it normal to have all these certificates? Many look dodgy. Image resized. Click to see full-version
2
votes
2answers
12k views

Install company's wireless certificate to Samsung Android 4.0.3. tablet

Trying to install all exported windows WEP Enterprise 802.1X Wireless certificates (.p12 extension) to a Samsung Android 4.0.3 tablet. With no certificate installer, Android certificate was installed ...
14
votes
2answers
34k views

Unable to Install Certificate

I am trying to install this certificate on a Google Nexus 7 tablet. I have copied the certificate file (from Win7x64) onto its internal storage and opened it in a file manager to install it. This ...
7
votes
2answers
681 views

How does Android handle wifi root CAs? Should they be a security concern?

My university requires me to install a custom root CA to connect to their wifi network. When I installed it on my phone, it let me specify "Wifi" or "VPN and apps". I chose wifi, and was able to ...
12
votes
5answers
88k views

How can I remove trusted CAs on Android?

From the current fallout around DigiNotar (in short, a Root Certificate Authority that has been hacked, fake HTTPS certificates issued, MITM attacks very likely), there are some parts concerning ...
1
vote
0answers
82 views

Do older Android versions support SHA-256?

We are updating our certs. for our MDM program, and that includes rolling out SHA-256. That being said, do all Android versions support SHA-256 (especially 4.0.3 and 4.1.1)?
21
votes
1answer
77k views

What Trusted Root CAs are included in Android by default?

There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone ...
0
votes
1answer
180 views

Certificate expiry upcoming [closed]

Today my phone tells me that its certificate will expire in February 2018 What will happen to my phone when this date occurs? Do I need (a) to worry (b) to take pre-emptive action? ...
6
votes
6answers
12k views

Install CA without having to activate screen lock

I have a Nexus 7 (Android 4.1.1) and I want to add a CA (Certificate Authority) to my device to use it for the ssl-connection to my mail server. The CA is self-signed. The Certificate does only ...
1
vote
0answers
671 views

Bypassing certificate pinning with integrity checks on Android 7 (Nougat) or newer

How can I bypass Certificate Pinning, or bypass SSL verification entirely, in an Android app on Android 7 or newer that has a built-in hash 'integrity check' to rule out APK modification? Here is a ...
1
vote
0answers
187 views

Default trusted certificates

Is there a list default trusted certificates for a Nexus 6P? Are there lists for other devices? Is this a difficult seeing to track
1
vote
1answer
967 views

Can't install a new p12 user certificate

I can't import a new company-issued personal certificate in binary .p12 format. The old one worked fine, I have a new one (CA was updated so we had to be issued new ones) that fails the import. Both ...
-1
votes
1answer
2k views

How to lookup a specific security certificate on my phone?

I have been trying to find out which security ca certificate is which on my phone, when they are all active my phone runs really slow. Is there a way to find these certificates?
0
votes
1answer
433 views

How to accept SSL certificate using selenium on an emulated Android

I'm using selenium (with python) to test a website on an emulated android device (Android version 6 and Android version 5.1) on Sauce Labs. Selenium tries to access a website using the native ...