Questions tagged [https]
The https tag has no usage guidance.
85 questions
24
votes
3
answers
53k
views
How do I install a user certificate?
I have my own Root certificate that signs user certificates.
I have a site that will only allow you on with a user certificate which is signed by the root ca.
I have managed to get this site working ...
- 341
22
votes
1
answer
84k
views
What Trusted Root CAs are included in Android by default?
There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone ...
- 22.1k
19
votes
1
answer
36k
views
self-signed certificate install claims success, but android acts as if cert isn't there
I am trying to install the self-signed certificate for my web server in Android 4.3. I have the .crt file in the root of the SD card (which is actually emulated as I have no SD card in the slot).
To ...
- 1,403
10
votes
2
answers
605
views
How to know if a webview is using https
As a user, is there a way to know if the page displayed in a webview inside an application is using https or not?
- 211
9
votes
1
answer
5k
views
Let's Encrypt: Is there a workaround for the 2021 SSL "cutoff" for pre-7.1.1 Android devices?
In January 2021 all devices with Android prior to 7.1.1 will not be able to connect to HTTPS servers using Let's Encrypt certificate (Let's Encrypt blog post explaining the details)
Is there any ...
- 193
9
votes
2
answers
1k
views
How does Android handle wifi root CAs? Should they be a security concern?
My university requires me to install a custom root CA to connect to their wifi network. When I installed it on my phone, it let me specify "Wifi" or "VPN and apps". I chose wifi, and was able to ...
8
votes
1
answer
1k
views
Why are Let's Encrypt security certificates invalidated prior to schedule on affected Android devices?
According to a well-regarded QA answer by a member of our Android community here on Stack Exchange:
By the current schedule, Let's Encrypt cross signing will end on September the 30th 2024. After ...
- 4,768
7
votes
2
answers
910
views
HTTPS filtering breaks some apps
I have enabled HTTPS filtering in AdGuard. I installed AdGuard's certificates, and the Magisk module that moves the certificates to the system store. Nevertheless, some apps don't work. Why is this? ...
- 91
7
votes
0
answers
2k
views
How to remember/cache a client certificate
I support a web-application that requires an https connection with client certificates as part of the authentication scheme. On most browsers (Desktop clients, iOS Safari, etc) if you are prompted for ...
- 171
6
votes
1
answer
9k
views
Android support for TLS
I have found that TLS1.1 and TLS1.2 is supported from API level 16 and on by default from API level 20. This corresponds to Android 4.1 (supported) and Android 4.4W (wearable) or Android 5.0 (on by ...
- 163
5
votes
1
answer
2k
views
Firefox for Android refuses loading any website
I wanted to give Firefox for Android a try (I'm a long-time Chrome user), but after installing it from the Play Store, I discovered it refuses to load any website, always showing this security warning ...
- 293
5
votes
3
answers
28k
views
How to Bypass Certificate Errors in Google Chrome Android?
Apparently desktop Chrome has a flag called --ignore-certificate-errors that allows you to bypass all certificate warnings. Is there an equivalent for Android Chrome? I checked in chrome://flags but ...
- 163
4
votes
3
answers
12k
views
Where to get OpenSSL binary for Android?
I have a Nexus 10 (unlocked & rooted) and I wanted to get the openssl binary on there so I can verify HTTPS certificates:
$ openssl s_client -connect <IPADDRESS>
However, no matter what I ...
- 267
4
votes
0
answers
2k
views
Cannot add new Certificates to Android Device
Using a Pixel 6a, running Android 13.
I am trying to install certificates from a private CA I have established on the internal network. I was able to install the root certificate by doing the ...
- 41
3
votes
1
answer
13k
views
How to set Wi-Fi HTTPS proxy, not HTTP, via adb shell?
For HTTP I found a link: How to set WIFI proxy via adb shell?
But I want to setup HTTPS proxy via adb shell.
- 31
3
votes
2
answers
600
views
Is Android susceptible to OpenSSL vulnerabilities? [duplicate]
There has been a big vulnerability discovered in OpenSSL today, are android applications affected, and what can we do to get a secure version?
What about people with older devices (such as the HTC ...
- 830
3
votes
1
answer
2k
views
How to find HTTP requests in apk source code
I've extracted an apk(react native) with dex2jar and jar to java through jd-qui and also with apktool, and I can view the source code but there is no clue where are the HTTP requests in the source ...
- 31
3
votes
1
answer
3k
views
Legacy Android 4.0 CA-Certificates Update
I have two legacy Android 4.0 Garmin Monterra devices. It's not possible anymore to open the Google Play Store or some websites. When I open most of the websites with Chrome, I receive an SSL error ...
- 31
3
votes
1
answer
3k
views
How can I import a Root CA that's trusted by Chrome on Android 11
I have a Root CA (airgapped, openssl) that I use for a lot of internal lab projects.
In the past, I've just imported the CA cert into the User credentials store on Android and the system began ...
3
votes
1
answer
798
views
How can I get back lost internet access on Android 4.x or lower?
I have an Acer A500 tablet running Android 4.0.3. Trying this after not using for some time I find it can't access most websites, getting "Webpage not available" in Opera Mini browser. I ...
- 31
3
votes
1
answer
1k
views
Network connectivity issues on apps and sites with SSL
I'm using Asus Memo Pad (ME172V) running Android 4.1.1. Apps (Facebook, Play Store, Yahoo! Mail, Skype, etc) cannot access the WiFi network. I can browse using Chrome (except for SSL sites) and can ...
- 31
3
votes
3
answers
8k
views
Decrypting HTTPS Traffic from Android Apps via Fiddler?
I am actually trying to debug all the traffic going in and out on my phone. I am using Fiddler on my PC, and ProxyDroid on my phone to do this. HTTP traffic works fine. I am able to decrypt it ...
- 31
3
votes
0
answers
150
views
How to update libssl.so on very old devices?
I tried asking this on xdaforums but did not get a useful answer so I thought I would try here.
I've got some very old devices (used as wifi-only) that are starting to have issues connecting to (some ...
3
votes
1
answer
778
views
How can I view a TLS 1.2 only website on an outdated tablet?
I have a tablet from 2011 (Prestigio MultiPad PMP3384B) with Android 2.3 which I use occasionally. I’ve experienced recently that I cannot view some webpages (https://www.nytimes.com/, for example) as ...
- 131
2
votes
2
answers
984
views
How to browse securely, anonymously and without blocks on Android?
So here's your Average Joe at a coffee store, using the open Wifi on his shiny new Android phone. Obviously there are the same issues with using a laptop or any other device on an open network, ...
- 21
2
votes
2
answers
7k
views
Setting up an HTTPS proxy
I use proxifier to connect to an HTTPS proxy on the PC, what should I do in order to connect similarly on my Android smartphone?
My Android version is 4.3, Jelly Bean.
- 121
2
votes
1
answer
3k
views
Connection to home server via https – works with WiFi, but not with 3G
I have a very weird issue with my phone (Alcatel 997D running Android 4.0.4). Let me start at the beginning. I provide certain services (mostly syncing stuff, Firefox and Cal/CardDAV) on a server with ...
- 121
2
votes
1
answer
11k
views
Unable to open secure HTTPS websites on the tablet Android
My laptop and tablet are connected to the same access point. The LAN port of the WiFi point is connected to the router that uses DHCP protocol. I can access all the websites including secure ones ...
- 73
2
votes
1
answer
1k
views
How do I import a user CA for the Email app properly?
For my own setup I use a personal CA: "Gert van Dijk CA". I'm using this for HTTPS and VPN successfully by importing the CA certificate into the Android keystore. I'm having trouble getting the Email ...
- 887
2
votes
0
answers
339
views
Adding a self-signed certificate to the trusted list? [duplicate]
I have my own self-signed SSL certificate for a website I need to keep relatively secure. I've been able to install my client SSL certificate just fine, but I can't seem to install the server's ...
- 2,632
2
votes
0
answers
10k
views
Resolving SSL Protocol Error on data connection but not on wifi [closed]
When I try to access secure web sites via https (ssl), I get an error.
Chrome error message:
Error 107 (net::ERR_SSL_PROTOCOL_ERROR) SSL_Protocol Error
Firefox error message:
...
- 121
2
votes
0
answers
815
views
Shortening URLs using goo.gl and Tasker
I'm trying to use Tasker to shorten URLs. Previously, I don't think this was possible, but v1.3 added support for https.
I've tried following the instructions here: https://developers.google.com/url-...
- 129
1
vote
1
answer
2k
views
Is there a web browser for the 1st generation Kindle Fire that uses TLS1.2 or higher?
Various websites are starting to fail to load in the built-in Silk web browser, and I've tracked the issue down to the fact that Silk uses only TLS 1.0.
TLS 1.0/1.1 is outdated and insecure to such ...
- 243
1
vote
1
answer
580
views
Page can't be loaded in S4 using http, but it does in https
I'm having special issues loading a website in my Galaxy S4, either Chrome and the default browser. In my case, when I try to access a website file using http, it throws an error 500, while accessing ...
- 111
1
vote
1
answer
5k
views
Unable to install a modified apk file
I want to monitor the https traffic of an Android app downloaded from google play.
This app can only be run at Android N and above.
So I use Charles proxy and follow this document to modify the apk ...
- 133
1
vote
1
answer
423
views
Intermitent SSL_PROTOCOL_ERROR when using Android Wi-Fi hotspot
When browsing the internet using the Wi-Fi hotspot of my Android phone (Xiaomi Redmi Note 10 Pro), some requests fail with the following error: net::ERR_SSL_PROTOCOL_ERROR
Here is a screenshot of the ...
- 31
1
vote
1
answer
295
views
What's a secure way to message/talk to someone in CM9?
I'm using CM9 nightly (20120712 i.e. today).
I need to talk securely, without the chance of eavesdropping, to someone who also has CM9 nightly (not sure how up-to-date but not more than 1 month old).
...
- 970
1
vote
2
answers
7k
views
What can I do to upgrade an old Android 4.0.3 tablet?
I have an Asus Transformer TF101 that is running Android 4.0.3.
The tablet can connect websites in HTTP without issue but not in HTTPS.
Most HTTPS websites are totally unreachable. Some websites (from ...
- 111
1
vote
1
answer
1k
views
Is there a way to capture HTTP requests from an installed Play Store app?
I'm developing a search aggregator service so I'd like to get the endpoint of some of the stores that, currently, doesn't expose their API. So I'd like to now if there's a way to do this with my ...
- 111
1
vote
1
answer
792
views
SSL error on Firebase hosting on old Android devices
I am not being able to see my Firebase Web App on old Android Devices due to SSL error.
There is a question about this, but the answer doesn't say how to solve it.
Is there any solution for this?
- 111
1
vote
1
answer
738
views
How to inspect HTTPS traffic of a third-party app on Android 9+
I want to inspect inside HTTPS-encrypted packets that an app is sending. It is not my app, I don't have its source code.
My device is rooted, so I can modify /system/etc/security/cacert if needed, ...
- 5,406
1
vote
1
answer
2k
views
Using Gmail app on a public WiFi
Does official Gmail app use a secure connection?
This post above discussing whatever Gmail using a secure connection, but is it relevant to a public WiFi connection? Or in public WiFi, is there a ...
- 11
1
vote
1
answer
856
views
Android browser: how to revoke ssl permission on a single site after giving it?
I'm building a website under ssl certificate. It just works on desktops but android browser argues that the ssl authority is not trustworthy. So to see the staging site I told it to just consider it ...
- 111
1
vote
1
answer
2k
views
Android does not download any files from untrusted CA certificate site
I work on a site that serves mobile phones and shares some file. When I publish my site in http everything works great.
But when I activate SSL and publish my site via HTTPS with my own certificate, ...
- 133
1
vote
1
answer
745
views
How to inspect any android app's HTTP/HTTPS request using Requestly.io?
Requestly.io currently allows to intersect the HTTP and HTTPS packets if requests are made from google chrome as the SSL certificates can not be installed for "VPN and App".
How to inspect ...
1
vote
0
answers
998
views
HttpCanary target app uses a non system certificate
I'm looking for a way to bypass a target app using a non-system certificate. The HttpCanary app itself does give a 'solution' however it's incredibly unclear:
Goto Settings->HttpCanary root CA ...
- 11
1
vote
0
answers
113
views
Android 7 breaks certificates on Samsung Browser and in Whatsapp
On a Samsung S6 Plus Edge running on Android 7, certain security certificates will break since September 2021: the workaround which Let's Encrypt implemented doesn't seem to work in Samsung Internet. ...
- 121
1
vote
0
answers
60
views
Let's Encrypt Root certificate expired on old Android tablet. How to fix? [duplicate]
I have an old Android tablet, and websites with Let's Encrypt SSL certificates no longer works.
On Let's Encrypt's web site they basically just says it should still work
But in my case, it doesn't, I ...
- 41
1
vote
0
answers
448
views
import pem file containing multiple CA certs
Using Samsung S4, Android 5.0.1, not rooted.
Recently I have found at least two websites that the Chrome browser on Android 5.0.1 reports https is not secure. This is because the phone does not have ...
- 131
1
vote
0
answers
2k
views
HTTP/HTTPS Transparent Proxy on Android
So on linux, I use transparent mode of mitmdump (mitmproxy without interaction) to build a websites filter and I run it as root on startup so that it cannot be killed if the user does not have sudo ...
- 11