Skip to main content

Questions tagged [https]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
8 votes
1 answer
1k views

Why are Let's Encrypt security certificates invalidated prior to schedule on affected Android devices?

According to a well-regarded QA answer by a member of our Android community here on Stack Exchange: By the current schedule, Let's Encrypt cross signing will end on September the 30th 2024. After ...
9 votes
1 answer
4k views

Let's Encrypt: Is there a workaround for the 2021 SSL "cutoff" for pre-7.1.1 Android devices?

In January 2021 all devices with Android prior to 7.1.1 will not be able to connect to HTTPS servers using Let's Encrypt certificate (Let's Encrypt blog post explaining the details) Is there any ...
1 vote
1 answer
2k views

Legacy Android 4.0 CA-Certificates Update

I have two legacy Android 4.0 Garmin Monterra devices. It's not possible anymore to open the Google Play Store or some websites. When I open most of the websites with Chrome, I receive an SSL error ...
7 votes
2 answers
759 views

HTTPS filtering breaks some apps

I have enabled HTTPS filtering in AdGuard. I installed AdGuard's certificates, and the Magisk module that moves the certificates to the system store. Nevertheless, some apps don't work. Why is this? ...
1 vote
1 answer
256 views

How to inspect any android app's HTTP/HTTPS request using Requestly.io?

Requestly.io currently allows to intersect the HTTP and HTTPS packets if requests are made from google chrome as the SSL certificates can not be installed for "VPN and App". How to inspect ...
0 votes
0 answers
195 views

How do I trust a certificate on android 11 device?

I want to setup this app called Http Toolkit and for some reason I have the warning "System Trust Disabled". My android 11 device is rooted using ksu . How do I trust a certificate on ...
3 votes
0 answers
111 views

How to update libssl.so on very old devices?

I tried asking this on xdaforums but did not get a useful answer so I thought I would try here. I've got some very old devices (used as wifi-only) that are starting to have issues connecting to (some ...
3 votes
2 answers
7k views

Decrypting HTTPS Traffic from Android Apps via Fiddler?

I am actually trying to debug all the traffic going in and out on my phone. I am using Fiddler on my PC, and ProxyDroid on my phone to do this. HTTP traffic works fine. I am able to decrypt it ...
1 vote
2 answers
5k views

What can I do to upgrade an old Android 4.0.3 tablet?

I have an Asus Transformer TF101 that is running Android 4.0.3. The tablet can connect websites in HTTP without issue but not in HTTPS. Most HTTPS websites are totally unreachable. Some websites (from ...
3 votes
0 answers
2k views

Cannot add new Certificates to Android Device

Using a Pixel 6a, running Android 13. I am trying to install certificates from a private CA I have established on the internal network. I was able to install the root certificate by doing the ...
3 votes
1 answer
2k views

How to find HTTP requests in apk source code

I've extracted an apk(react native) with dex2jar and jar to java through jd-qui and also with apktool, and I can view the source code but there is no clue where are the HTTP requests in the source ...
5 votes
1 answer
2k views

Firefox for Android refuses loading any website

I wanted to give Firefox for Android a try (I'm a long-time Chrome user), but after installing it from the Play Store, I discovered it refuses to load any website, always showing this security warning ...
0 votes
2 answers
787 views

Can a school wifi certificate track me at home?

At my school, when logging into wifi for the first time, we enter our ID & password into a normal wifi login page, then we download a certificate. I cannot confirm if the certificate changes ...
1 vote
0 answers
814 views

HttpCanary target app uses a non system certificate

I'm looking for a way to bypass a target app using a non-system certificate. The HttpCanary app itself does give a 'solution' however it's incredibly unclear: Goto Settings->HttpCanary root CA ...
3 votes
1 answer
2k views

How can I import a Root CA that's trusted by Chrome on Android 11

I have a Root CA (airgapped, openssl) that I use for a lot of internal lab projects. In the past, I've just imported the CA cert into the User credentials store on Android and the system began ...
1 vote
1 answer
363 views

Intermitent SSL_PROTOCOL_ERROR when using Android Wi-Fi hotspot

When browsing the internet using the Wi-Fi hotspot of my Android phone (Xiaomi Redmi Note 10 Pro), some requests fail with the following error: net::ERR_SSL_PROTOCOL_ERROR Here is a screenshot of the ...
3 votes
1 answer
1k views

Network connectivity issues on apps and sites with SSL

I'm using Asus Memo Pad (ME172V) running Android 4.1.1. Apps (Facebook, Play Store, Yahoo! Mail, Skype, etc) cannot access the WiFi network. I can browse using Chrome (except for SSL sites) and can ...
1 vote
0 answers
96 views

Android 7 breaks certificates on Samsung Browser and in Whatsapp

On a Samsung S6 Plus Edge running on Android 7, certain security certificates will break since September 2021: the workaround which Let's Encrypt implemented doesn't seem to work in Samsung Internet. ...
1 vote
0 answers
50 views

Let's Encrypt Root certificate expired on old Android tablet. How to fix? [duplicate]

I have an old Android tablet, and websites with Let's Encrypt SSL certificates no longer works. On Let's Encrypt's web site they basically just says it should still work But in my case, it doesn't, I ...
0 votes
0 answers
73 views

Is there a way that I can "share" images by sending them to an HTTP endpoint?

I want to make some hacky prototypes where I use my phone to collect data and then process it with a regular program. For this I want to share images with an HTTP endpoint written by me to execute ...
3 votes
1 answer
475 views

How can I get back lost internet access on Android 4.x or lower?

I have an Acer A500 tablet running Android 4.0.3. Trying this after not using for some time I find it can't access most websites, getting "Webpage not available" in Opera Mini browser. I ...
0 votes
0 answers
2k views

Installing Charles proxy certificate on Samsung

I have a problem with Charles proxy certificate on Samsung phone. On Xiaomi everything works fine. But when I try to decrypt traffic on my Samsung device I can't do it - SSL handshake with client ...
0 votes
0 answers
632 views

Sniff Android protected app HTTPS requests

I am going to capture an app's HTTPS request to get its Login API. I am using Fiddler. When inputting the username and password and pressing sign in, the app is working. But in Fiddler, I can not find ...
3 votes
1 answer
604 views

How can I view a TLS 1.2 only website on an outdated tablet?

I have a tablet from 2011 (Prestigio MultiPad PMP3384B) with Android 2.3 which I use occasionally. I’ve experienced recently that I cannot view some webpages (https://www.nytimes.com/, for example) as ...
1 vote
1 answer
1k views

Is there a way to capture HTTP requests from an installed Play Store app?

I'm developing a search aggregator service so I'd like to get the endpoint of some of the stores that, currently, doesn't expose their API. So I'd like to now if there's a way to do this with my ...
5 votes
3 answers
26k views

How to Bypass Certificate Errors in Google Chrome Android?

Apparently desktop Chrome has a flag called --ignore-certificate-errors that allows you to bypass all certificate warnings. Is there an equivalent for Android Chrome? I checked in chrome://flags but ...
1 vote
1 answer
686 views

SSL error on Firebase hosting on old Android devices

I am not being able to see my Firebase Web App on old Android Devices due to SSL error. There is a question about this, but the answer doesn't say how to solve it. Is there any solution for this?
0 votes
1 answer
6k views

How to resolve "enter the password for credential storage" issue?

So I am playing around with fiddler web proxy. I need to decrypt https traffic. So I am trying to put the fiddler root CA cert in my device trust store. But it keeps asking me "Enter the password for ...
0 votes
0 answers
456 views

Android 10 user CA file not being used in apps

I'm using an ISP that does internet filtering for me, I have install their CA file, and it works in the browser, and used to work in all apps. After the latest update for Xiaomi Redmi Pro 9, Youtube, ...
0 votes
0 answers
317 views

import pem file containing multiple CA certs

Using Samsung S4, Android 5.0.1, not rooted. Recently I have found at least two websites that the Chrome browser on Android 5.0.1 reports https is not secure. This is because the phone does not have ...
0 votes
0 answers
42 views

Is it possible to have shell access to Trusted Certificates

I have an Android Application that launches Python via JNI. Inside of Python I have web requets that I make, some need to be secure. I can configure the APK to be able to access a User CA certificate, ...
1 vote
1 answer
704 views

How to inspect HTTPS traffic of a third-party app on Android 9+

I want to inspect inside HTTPS-encrypted packets that an app is sending. It is not my app, I don't have its source code. My device is rooted, so I can modify /system/etc/security/cacert if needed, ...
1 vote
1 answer
4k views

Unable to install a modified apk file

I want to monitor the https traffic of an Android app downloaded from google play. This app can only be run at Android N and above. So I use Charles proxy and follow this document to modify the apk ...
0 votes
0 answers
65 views

Changing third-party websites on android device without browser extensions available

I'm searching a way on how to change behavior of some website in mobile browser. For example: Remove annoing Ad (specific one) Change some elements on a website, to make it easier to read on small ...
0 votes
0 answers
46 views

Montoring network traffic on Android phone (for research user study)

For context: We would like to analyze user mobile online (browsing) behavior in a user study. The study has been approved by our university's IRB, participants will have to give informed consent and ...
0 votes
0 answers
510 views

Connecting to own proxy with self-made CA certificate not (properly) working

I have a Squid proxy installed with HTTPS/SSL support. When I install the generated CA certificate in Firefox and set the proxy, everything looks good -- that is, I can see all the HTTP(S) requests ...
1 vote
0 answers
2k views

HTTP/HTTPS Transparent Proxy on Android

So on linux, I use transparent mode of mitmdump (mitmproxy without interaction) to build a websites filter and I run it as root on startup so that it cannot be killed if the user does not have sudo ...
2 votes
1 answer
11k views

How to set Wi-Fi HTTPS proxy, not HTTP, via adb shell?

For HTTP I found a link: How to set WIFI proxy via adb shell? But I want to setup HTTPS proxy via adb shell.
0 votes
0 answers
2k views

SSL certificates not updated on old Android

I have an old Android smartphones. More and more websites stop working because my chrome browser doesn't trust the root CA (Outdated or missing CA certificates). Obviously the root CA list is only ...
user avatar
23 votes
3 answers
52k views

How do I install a user certificate?

I have my own Root certificate that signs user certificates. I have a site that will only allow you on with a user certificate which is signed by the root ca. I have managed to get this site working ...
0 votes
0 answers
225 views

Why I couldn't monitor traffic from this page?

When I opened the capture log I found nothing from the page other than this when I first tried to visit it using http only, and then I get that security warning and i click proceed to unsafe anyway i ...
1 vote
0 answers
2k views

Cannot connect to HTTPS sites due to device clock being ahead

I cannot access 'My Search.com' I just set as my homepage (Brave browser) and Yandex for my search engine (new install). I got an error saying that my (device) time is ahead. Your clock is ...
1 vote
1 answer
2k views

Is there a web browser for the 1st generation Kindle Fire that uses TLS1.2 or higher?

Various websites are starting to fail to load in the built-in Silk web browser, and I've tracked the issue down to the fact that Silk uses only TLS 1.0. TLS 1.0/1.1 is outdated and insecure to such ...
6 votes
1 answer
9k views

Android support for TLS

I have found that TLS1.1 and TLS1.2 is supported from API level 16 and on by default from API level 20. This corresponds to Android 4.1 (supported) and Android 4.4W (wearable) or Android 5.0 (on by ...
3 votes
3 answers
12k views

Where to get OpenSSL binary for Android?

I have a Nexus 10 (unlocked & rooted) and I wanted to get the openssl binary on there so I can verify HTTPS certificates: $ openssl s_client -connect <IPADDRESS> However, no matter what I ...
9 votes
2 answers
1k views

How does Android handle wifi root CAs? Should they be a security concern?

My university requires me to install a custom root CA to connect to their wifi network. When I installed it on my phone, it let me specify "Wifi" or "VPN and apps". I chose wifi, and was able to ...
22 votes
1 answer
82k views

What Trusted Root CAs are included in Android by default?

There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone ...
0 votes
1 answer
139 views

HTTPS websites slow on Phone

I am trying to investigate why our Phones are experiencing slow browsing to HTTPS sites. It happens only the first time after the phone in question has been locked for a couple of minutes or more. So ...
1 vote
0 answers
963 views

Bypassing certificate pinning with integrity checks on Android 7 (Nougat) or newer

How can I bypass Certificate Pinning, or bypass SSL verification entirely, in an Android app on Android 7 or newer that has a built-in hash 'integrity check' to rule out APK modification? Here is a ...
2 votes
2 answers
7k views

Setting up an HTTPS proxy

I use proxifier to connect to an HTTPS proxy on the PC, what should I do in order to connect similarly on my Android smartphone? My Android version is 4.3, Jelly Bean.