Questions tagged [https]
The https tag has no usage guidance.
56
questions
0
votes
0answers
27 views
How can I get Chrome on Android validate a certificate for a local domain?
This issue does not occur on Windows nor macOS, only Android.
I have a local server, which I access through a local domain name and zone, using a local DNS server.
I have generated a SSL certificate ...
0
votes
0answers
7 views
What is the User Agent when send mobile HTTP request?
Now, there is a Android app. I click a public link/image/video in the app. An HTTP request was sent to the server.
Question:
What is the possible User Agent? In the web application, I know the User ...
0
votes
0answers
9 views
SSL certificates not updated on old Android
I have an old Android smartphones. More and more websites stop working because my chrome browser doesn't trust the root CA (Outdated or missing CA certificates). Obviously the root CA list is only ...
0
votes
0answers
37 views
Installing trusted certificate on android emulator(blustacks)
I'm tryung to install a trusted certificate on blustacks.
I have a VPN in my local network that requires a trusted certificate on every machine that wants to access internet from it. I have ...
0
votes
0answers
54 views
Why I couldn't monitor traffic from this page?
When I opened the capture log I found nothing from the page other than this when I first tried to visit it using http only, and then I get that security warning and i click proceed to unsafe anyway i ...
1
vote
0answers
76 views
Mismatching certificate store and used certificates
About 2 weeks ago I've started to experience SSL errors on my Samsung Galaxy S8 (SM-G950F), in various applications (Google Play services, Netflix, Uber and also when browsing to certain HTTPS domains)...
1
vote
0answers
72 views
Cannot connect to HTTPS sites due to device clock being ahead
I cannot access 'My Search.com' I just set as my homepage (Brave browser) and Yandex for my search engine (new install). I got an error saying that my (device) time is ahead.
Your clock is ...
0
votes
0answers
24 views
Streaming display of Android phone
I would like to use Screen Stream over HTTP for streaming the display of my Phone (Android 7) to my PC. When I start streaming and I try to open the link on my PC nothing happens and on my phone I don'...
0
votes
0answers
275 views
How to solve ssl certificate issue on Android oreo 8.1
I build a Android application and want to fix bugs by using man in middle attack . I used a ssl capture or debug proxy app for find a bugs but when I use these apps its doesn't work on MY android ...
1
vote
1answer
585 views
Is there a web browser for the 1st generation Kindle Fire that uses TLS1.2 or higher?
Various websites are starting to fail to load in the built-in Silk web browser, and I've tracked the issue down to the fact that Silk uses only TLS 1.0.
TLS 1.0/1.1 is outdated and insecure to such ...
0
votes
1answer
69 views
HTTPS websites slow on Phone
I am trying to investigate why our Phones are experiencing slow browsing to HTTPS sites.
It happens only the first time after the phone in question has been locked for a couple of minutes or more.
So ...
1
vote
0answers
591 views
Bypassing certificate pinning with integrity checks on Android 7 (Nougat) or newer
How can I bypass Certificate Pinning, or bypass SSL verification entirely, in an Android app on Android 7 or newer that has a built-in hash 'integrity check' to rule out APK modification?
Here is a ...
1
vote
0answers
827 views
Can't visit “ https ” sites with an Android device using Wi-Fi
I have a strange problem on one of my old phones. I have an old Android device running Android 2.3.4, and it works perfectly. But, I found that, it can't access to https sites with the basic browser ...
0
votes
0answers
56 views
Does anyone know what this android emulator call is?
I've been looking at the network traffic for an Android emulator using mitm proxy. I have noticed large amounts of traffic going to google's servers. Does anyone know what this request would carry ...
7
votes
2answers
537 views
How does Android handle wifi root CAs? Should they be a security concern?
My university requires me to install a custom root CA to connect to their wifi network. When I installed it on my phone, it let me specify "Wifi" or "VPN and apps". I chose wifi, and was able to ...
1
vote
0answers
125 views
Removed trusted CA's now can't use Google…Anything!
My boyfriend accidently hit the 'Remove all stored credentials' and now he can not access anything Google, but most importantly the Play Store.
OK it might have been on purpose, don't ask, but now it'...
0
votes
1answer
108 views
Watch whether an app uses TLS
I'd like to inspect the network usage of my apps (e.g., a banking app) to determine the security protocols they employ (if HTTPS: TLS layer version, encryption protocol, key size, signature algorithm, ...
5
votes
0answers
1k views
How to remember/cache a client certificate
I support a web-application that requires an https connection with client certificates as part of the authentication scheme. On most browsers (Desktop clients, iOS Safari, etc) if you are prompted for ...
4
votes
1answer
6k views
Android support for TLS
I have found that TLS1.1 and TLS1.2 is supported from API level 16 and on by default from API level 20. This corresponds to Android 4.1 (supported) and Android 4.4W (wearable) or Android 5.0 (on by ...
1
vote
0answers
668 views
How are certs validated against default trust store?
Through some reading, I have a fairly rough understanding about how https works with Android apps, especially how are certificate validations done. Some of the resources that I referred to for gaining ...
0
votes
1answer
1k views
Import/Install SSL-certificate without CA-flag
Our team has the following problem:
We are developing a client-application for android and iOS using Unity + UniWebview + HTML. This app includes Ajax-requests to some servers via jQuery. For testing ...
1
vote
1answer
1k views
Using Gmail app on a public WiFi
Does official Gmail app use a secure connection?
This post above discussing whatever Gmail using a secure connection, but is it relevant to a public WiFi connection? Or in public WiFi, is there a ...
1
vote
0answers
162 views
Why is Chrome on Android sending my HTTP requests to an IP owned by DoD?
When I make http requests to my website with Chrome Browser on android 6.0 (Nexus6) I saw that it is making requests to 130.90.151.44 instead of the IP of my webserver.
If I use another browser, it ...
0
votes
1answer
2k views
Unable to accept SSL certificate (k9mail)
I am setting up k9mail on a 4.2 device (rooted Sony Xperia Mini Pro with stock ROM and crap removed) and it complains about the IMAP SSL certificate not being valid.
This happens with both a self-...
3
votes
2answers
12k views
How to Bypass Certificate Errors in Google Chrome Android?
Apparently desktop Chrome has a flag called --ignore-certificate-errors that allows you to bypass all certificate warnings. Is there an equivalent for Android Chrome? I checked in chrome://flags but ...
0
votes
1answer
5k views
How to resolve “enter the password for credential storage” issue?
So I am playing around with fiddler web proxy. I need to decrypt https traffic. So I am trying to put the fiddler root CA cert in my device trust store. But it keeps asking me "Enter the password for ...
1
vote
1answer
716 views
Android browser: how to revoke ssl permission on a single site after giving it?
I'm building a website under ssl certificate. It just works on desktops but android browser argues that the ssl authority is not trustworthy. So to see the staging site I told it to just consider it ...
1
vote
1answer
1k views
Android does not download any files from untrusted CA certificate site
I work on a site that serves mobile phones and shares some file. When I publish my site in http everything works great.
But when I activate SSL and publish my site via HTTPS with my own certificate, ...
1
vote
0answers
1k views
Why won't my Android phone access any HTTPS websites through WiFi?
My Samsung Galaxy Note 3 can not access any secured website while connected via my home WiFi – even applications like Google Search and Facebook can't access the internet and give an error saying "...
0
votes
1answer
2k views
Can't open non HTTPS websites on mobile network. (Android Lollipop on Nexus 5, Nexus 4)
I recently updated my Nexus 5 to Lollipop. The problem is that when I am on a mobile network, I can ONLY open HTTPS websites. All the HTTP websites appear as a blank white page. When I am on WiFi, ...
0
votes
1answer
484 views
HTTPS sites no longer load on my Android after installing cert to truststore
I have a rooted Android 4.3 JellyBean. I was testing something and trying to install the certificate for Charles Proxy so I could sniff some SSL traffic. I was able to push the Charles certificate to /...
1
vote
2answers
4k views
Setting up an HTTPS proxy
I use proxifier to connect to an HTTPS proxy on the PC, what should I do in order to connect similarly on my Android smartphone?
My Android version is 4.3, Jelly Bean.
1
vote
1answer
567 views
Page can't be loaded in S4 using http, but it does in https
I'm having special issues loading a website in my Galaxy S4, either Chrome and the default browser. In my case, when I try to access a website file using http, it throws an error 500, while accessing ...
0
votes
1answer
500 views
Is there any method through which I can make the YouTube app use https connections instead of http?
Well the question describes the problem.
I know that the YouTube app is not using secure connections, and I want to force the YouTube app to use secure connections. Can this be done?
3
votes
2answers
526 views
Is Android susceptible to OpenSSL vulnerabilities? [duplicate]
There has been a big vulnerability discovered in OpenSSL today, are android applications affected, and what can we do to get a secure version?
What about people with older devices (such as the HTC ...
0
votes
1answer
125 views
Is K-9 Mail susceptible to MITM attacks?
I am using K-9 Mail on Android and have set the SSL option to 'SSL (strict)'.
My understanding is that with this option K-9 definitely requires a valid SSL certificate which is issued by a trusted CA,...
0
votes
0answers
13 views
PDF on a https server can not be downloaded with Chrome [duplicate]
I try to download a pdf on an https server (with an authenfication) but this is unsuccessful with Chrome or LG Browser.
This is ok with Firefox.
I found this answer/comment :
Unable to download from ...
14
votes
1answer
17k views
How to export SSL certificate from Android, Chrome
I have a Nexus 5 with the latest Android 4.4.2.
I'm registered on using Chrome . They use client certificates to authenticate the user. I installed the certificate and could successfully use the site ...
17
votes
1answer
26k views
self-signed certificate install claims success, but android acts as if cert isn't there
I am trying to install the self-signed certificate for my web server in Android 4.3. I have the .crt file in the root of the SD card (which is actually emulated as I have no SD card in the slot).
To ...
21
votes
3answers
40k views
How do I install a user certificate?
I have my own Root certificate that signs user certificates.
I have a site that will only allow you on with a user certificate which is signed by the root ca.
I have managed to get this site working ...
1
vote
0answers
226 views
remove RC4 from SSL/TLS ciphers
is there a way to remove RC4 from SSL/TLS ciphers in android system wide such that also apps and not only the browser doesn't use them anymore?
Thanks
2
votes
1answer
1k views
How do I import a user CA for the Email app properly?
For my own setup I use a personal CA: "Gert van Dijk CA". I'm using this for HTTPS and VPN successfully by importing the CA certificate into the Android keystore. I'm having trouble getting the Email ...
2
votes
1answer
3k views
Connection to home server via https – works with WiFi, but not with 3G
I have a very weird issue with my phone (Alcatel 997D running Android 4.0.4). Let me start at the beginning. I provide certain services (mostly syncing stuff, Firefox and Cal/CardDAV) on a server with ...
2
votes
0answers
303 views
Adding a self-signed certificate to the trusted list? [duplicate]
I have my own self-signed SSL certificate for a website I need to keep relatively secure. I've been able to install my client SSL certificate just fine, but I can't seem to install the server's ...
2
votes
3answers
10k views
Where to get OpenSSL binary for Android?
I have a Nexus 10 (unlocked & rooted) and I wanted to get the openssl binary on there so I can verify HTTPS certificates:
$ openssl s_client -connect <IPADDRESS>
However, no matter what I ...
2
votes
0answers
10k views
Resolving SSL Protocol Error on data connection but not on wifi [closed]
When I try to access secure web sites via https (ssl), I get an error.
Chrome error message:
Error 107 (net::ERR_SSL_PROTOCOL_ERROR) SSL_Protocol Error
Firefox error message:
...
2
votes
1answer
6k views
Decrypting HTTPS Traffic from Android Apps via Fiddler?
I am actually trying to debug all the traffic going in and out on my phone. I am using Fiddler on my PC, and ProxyDroid on my phone to do this. HTTP traffic works fine. I am able to decrypt it ...
1
vote
1answer
9k views
Unable to open secure HTTPS websites on the tablet Android
My laptop and tablet are connected to the same access point. The LAN port of the WiFi point is connected to the router that uses DHCP protocol. I can access all the websites including secure ones ...
10
votes
2answers
467 views
How to know if a webview is using https
As a user, is there a way to know if the page displayed in a webview inside an application is using https or not?
1
vote
0answers
907 views
Unable to open Google's secure websites over HTTPS
I can easily open https secured sites on my Win7 laptop (using Google Chrome).
But this is not possible with Chrome version 18.0.1025308 on my ONDA VI30W tablet (running ICS 4.0.3).
What do I need to ...
