Questions tagged [certificates]

A web infrastructure construct that facilitates the trust relationship between a web site as information provider and a client's web client (browser) as information consumer. It contains elements to satisfy authentication to satisfy requirements that parties to the connection are who they claim to be, and assist in handshaking for paired encryption methods to satisfy secure communication.

53 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
0answers
1k views

How to remember/cache a client certificate

I support a web-application that requires an https connection with client certificates as part of the authentication scheme. On most browsers (Desktop clients, iOS Safari, etc) if you are prompted for ...
5
votes
0answers
1k views

Does Samung Galaxy S2 support the use of Client Certificates for ActiveSync?

Does Samung Galaxy S2 support the use of Client Certificates for ActiveSync ? Most other Android phones need to rely on TouchDown or other third party applications. Can anyone confirm if this is ...
4
votes
0answers
1k views

Certificate Authority installation doesn't work

I've seen many many posts* lined to my problem, although none of them seems to refer to my bug. I set up my small PKI (for Web, mail etc.) and now try to import my CA .crt file to my Android device. ...
4
votes
0answers
4k views

Importing SSL certificate for email

I am having trouble importing an SSL CA certificate to authenticate my mail server. My mail server is run by Dreamhost, which offers TLS on their IMAP/SMTP servers, but with a certificate signed only ...
4
votes
1answer
10k views

Getting latest update of certificate/credential/ssl store

Hy, I realize sometimes when browsing with https shows the certificate is not valid "This certificate is not from a trusted authority", clicking continue will just poping up the same warning. That ...
3
votes
0answers
2k views

How to add a CA to trusted root

Since android 7, apps will not obey the user installed CA certificates anymore. So as a tester, if you want to test and verify issues such as certificate pinning you need to install the custom proxy ...
3
votes
1answer
10k views

How to remove a single client certificate?

Isn't it possible to remove a single client certificate from a device? On a Galaxy S6 running 5.0.2 I can remove all client certificates using: System settings Lock screen and security Other ...
3
votes
0answers
256 views

How do I tell Android to remember which client certificate to use for a given site?

I have a site that requires a client certificate in order to allow access. I've successfully installed a client certificate onto my Android device. When I access the site from Chrome, I'm prompted ...
3
votes
0answers
3k views

K9 doesn't like my SSL cert

My mail provider recently updated their SSL certificate and now I'm getting errors in K9 mail when I try to test my server information: java.lang.RuntimeException: java.lang.RuntimeException: error:...
3
votes
0answers
581 views

ICS email app, SSL certificates crash bug

Does anyone have a solution for the following situation: Added Exchange account, tick "Accept all SSL certificates", upon saving the setting the app crashes. Stock ICS, please see log here: https:/...
2
votes
0answers
718 views

Automatically verify signature on all Android Exchange emails

I work in an office where everyone uses a digital signature on their emails. I just bought a new LG G3 with 4.4.2 KitKat and whenever someone sends me an email that is signed, it shows up with a body ...
2
votes
0answers
6k views

How to setup Microsoft Exchange on Android? [No certificates found error]

I'm using a Nexus 5 running Android 4.4.4, and when I try to setup my company's email through the Email Android app I get the following error. No certificates found The app Exchange Services ...
2
votes
1answer
816 views

Save accepted untrusted certificates on email app (HTC Sensation)

I have a problem with the mail (not gmail) app on my HTC Sensation, that I'm guessing is part of HTC Sense 3. I'm using a server that has an untrusted certificate, and every time I try to refresh my ...
1
vote
0answers
180 views

Marshmallow: Adding system-wide custom root certificate

On Android 6 if I move my own root CA from /data/misc/user/0/cacerts-added to /system/etc/security/cacerts/ it doesn't work anymore. It is in the system list and active, but my browser says ...
1
vote
0answers
92 views

Mismatching certificate store and used certificates

About 2 weeks ago I've started to experience SSL errors on my Samsung Galaxy S8 (SM-G950F), in various applications (Google Play services, Netflix, Uber and also when browsing to certain HTTPS domains)...
1
vote
1answer
4k views

What is “com.samsung.android.dqagent_SA_SDK” user certificate? Is it safe?

My user certificates has the following: com.samsung.android.dqagent_SA_SDK. It seems so strange, it looks like someone put it on there. Is that normal?
1
vote
0answers
72 views

Do older Android versions support SHA-256?

We are updating our certs. for our MDM program, and that includes rolling out SHA-256. That being said, do all Android versions support SHA-256 (especially 4.0.3 and 4.1.1)?
1
vote
0answers
654 views

Bypassing certificate pinning with integrity checks on Android 7 (Nougat) or newer

How can I bypass Certificate Pinning, or bypass SSL verification entirely, in an Android app on Android 7 or newer that has a built-in hash 'integrity check' to rule out APK modification? Here is a ...
1
vote
0answers
187 views

Default trusted certificates

Is there a list default trusted certificates for a Nexus 6P? Are there lists for other devices? Is this a difficult seeing to track
1
vote
0answers
127 views

Removed trusted CA's now can't use Google…Anything!

My boyfriend accidently hit the 'Remove all stored credentials' and now he can not access anything Google, but most importantly the Play Store. OK it might have been on purpose, don't ask, but now it'...
1
vote
0answers
2k views

Install CA Certifcate using ADB?

I'm in an annoying chicken-and-the-egg loop. Android Browser (the stock browser) is rejecting a bunch of sites certified by Comodo certificate authority. I'm on Comodo's site trying to download their ...
1
vote
0answers
5k views

Can I export certificates from Credentials Storage

I have several certificates in the Credentials store that I would like to backup. Can they be extracted? OnePlus 2 running OxygenOS 2.2.0 Android 5.1.1 Not Rooted.
1
vote
0answers
706 views

How are certs validated against default trust store?

Through some reading, I have a fairly rough understanding about how https works with Android apps, especially how are certificate validations done. Some of the resources that I referred to for gaining ...
1
vote
0answers
468 views

How to install a certificate to Work Profile user

I would like my app on Work Profile user (https://www.android.com/intl/en_us/work/) to connect to a server with a cert. Since Work Profile user shares Settings with Owner user, I installed a cert from ...
1
vote
0answers
1k views

How to install a private key (.pfx certificate) on android?

I want to read a protected pdf file. I installed in on my Windows PC and install the .pfx certificate with the password to read it. There I can open it normally. But I can't do the same on my android ...
1
vote
0answers
463 views

is there a way to force chrome to accept a self signed site?

I want to access to a site in which zimbra is installed, the address is like 'https://...', but when I try to access it from chrome on my phone I have a message telling me the connection is not ...
1
vote
0answers
828 views

Wifi CA Certificates disappearing

I have an Xperia E3 running 4.4.2. My university's wifi network has a CA certificate to avoid having to re-enter credentials each time you connect. However, whenever I install this certificate (and ...
1
vote
0answers
4k views

How to configure VPN using pcf profile and custom certificate

I want to connect the VPN of my university with my Android device. My university provides a .pem certificate, a .pcf profile and instructions how to set up the vpn connection under a "normal" GNU/...
1
vote
0answers
185 views

Trouble with certificates

I have a Samsung Galaxy tablet model GT-P3110. I keep getting a message on my tablet each time I go to my Hotmail and Outlook email that there is a problem with the security certificate for these ...
1
vote
0answers
326 views

Cannot see installed user certificate

I have installed 2 user certificates to be used for wifi but when connecting the certificate is not showing up in the drop down . The CA certificate is showing though .
1
vote
2answers
887 views

Is there a in-built setting to login to public hotspots?

I have a SIM-lock free Galaxy W with Android 2.3.6 on it. The other day in the public library I found out that I was not able to login anyhow to the public Wi-Fi. It shows that the DHCP gives the ...
0
votes
0answers
13 views

How to inspect HTTPS traffic of a third-party app on Android 9+

I want to inspect inside HTTPS-encrypted packets that an app is sending. It is not my app, I don't have its source code. My device is rooted, so I can modify /system/etc/security/cacert if needed, ...
0
votes
0answers
27 views

Connecting to own proxy with self-made CA certificate not (properly) working

I have a Squid proxy installed with HTTPS/SSL support. When I install the generated CA certificate in Firefox and set the proxy, everything looks good -- that is, I can see all the HTTP(S) requests ...
0
votes
0answers
123 views

Install SSL certificate manually with root

I'm trying to install SSL certificate required by the HttpCanary app, but when I enter my PIN to install it, the PIN just keeps popping up indefinitely and I can't install it. So is there a way to ...
0
votes
1answer
2k views

“Certificate not secure” error on Samsung Email app on Note 8

I have a Samsung Galaxy Note 8 (Android 9, One UI 1.0) and am using Samsung's Email app (which comes preloaded on Samsung phones) to access my work email. Recently I went abroad and had to rely on ...
0
votes
0answers
205 views

Why can't I find a CERT.RSA file in my Android APK?

I need to view the certificate of an Android APK, however when I look in the META-INF folder, there is no CERT.RSA file. I know that somehow the APK must be signed, because I was able to put it on an ...
0
votes
0answers
84 views

How can I get Chrome on Android validate a certificate for a local domain?

This issue does not occur on Windows nor macOS, only Android. I have a local server, which I access through a local domain name and zone, using a local DNS server. I have generated a SSL certificate ...
0
votes
0answers
393 views

Installing trusted certificate on android emulator(blustacks)

I'm tryung to install a trusted certificate on blustacks. I have a VPN in my local network that requires a trusted certificate on every machine that wants to access internet from it. I have ...
0
votes
0answers
80 views

Why I couldn't monitor traffic from this page?

When I opened the capture log I found nothing from the page other than this when I first tried to visit it using http only, and then I get that security warning and i click proceed to unsafe anyway i ...
0
votes
0answers
37 views

How can I accept a browser certificate when browsing on Chrome on Android?

I'm browsing an application that is installed on my intranet site. On the desktop chrome browser, I get a security error which I normally accept and the site starts working again. How can I achieve ...
0
votes
0answers
118 views

PEAP WiFi issues S8+

I just received a new S8+ and I am having issues connecting to the WiFi at my corporation. The WiFi needs to be authenticated using PEAP, but there is nothing for me to select under "CA Certificate", ...
0
votes
0answers
91 views

How to locate app which installed a potentially malicious certificate?

On my S8 (Oreo) today, I got the notification: There is a certificate installed that may or not monitor your internet traffic. Did spyware install itself? Or is this normal? I updated from 7.0 to 8....
0
votes
1answer
666 views

How do I install the OWASP ZAP certificate as a trusted system CA on Bluestacks?

I have a rooted bluestacks android. I would like to use ZAP to monitor its SSL traffic. I exported ZAP's SSL certificate as a .cer file ("----- BEGIN CERTIFICATE .... ------ END CERTIFICATE -------")....
0
votes
0answers
600 views

Browsers crashing when trying to access captive portal (Wi-Fi log in page)

Recently I noticed that whenever I try to login to a captive portal Wi-Fi page, all of the browsers that I'm using crash. This happens before the page even finishes loading and consenquently I am ...
0
votes
1answer
218 views

Re-sign APK to prevent updating - crashes “divide by zero”

I'm using an app that has been updated, but doesn't work on my phone on the current version. So I'm currently using an older one. But of course it always shows up with an update in the PlayStore. Now ...
0
votes
0answers
2k views

How to Export Client Certificate from Firefox for Android on non-rooted device

I had a website install a client certificate into my Firefox browser (v35.0.1) on my tablet and I want to export and backup the certificate. I've found out after the fact that Firefox on android doesn'...
0
votes
1answer
4k views

'Could not validate certificate signature' error (Antennapod, Gingerbread)

I am using Android 2.3.6 (Gingerbread) and AntennaPod Version 0.9.9.5. When I am trying to access gpodder.net, either to login or search podcasts, I get the following error message: An error occured:...
0
votes
1answer
502 views

HTTPS sites no longer load on my Android after installing cert to truststore

I have a rooted Android 4.3 JellyBean. I was testing something and trying to install the certificate for Charles Proxy so I could sniff some SSL traffic. I was able to push the Charles certificate to /...
0
votes
1answer
127 views

Is K-9 Mail susceptible to MITM attacks?

I am using K-9 Mail on Android and have set the SSL option to 'SSL (strict)'. My understanding is that with this option K-9 definitely requires a valid SSL certificate which is issued by a trusted CA,...
0
votes
0answers
393 views

How to make Exchange client read signed 'application/ms-tnef' mail?

Someone sends an email with (among others) the following headers Content-Type: application/ms-tnef; name="winmail.dat" Content-Transfer-Encoding: binary X-MS-Has-Attach: yes X-MS-Exchange-...