Questions tagged [https]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
23
votes
3answers
49k views

How do I install a user certificate?

I have my own Root certificate that signs user certificates. I have a site that will only allow you on with a user certificate which is signed by the root ca. I have managed to get this site working ...
22
votes
1answer
80k views

What Trusted Root CAs are included in Android by default?

There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone ...
18
votes
1answer
32k views

self-signed certificate install claims success, but android acts as if cert isn't there

I am trying to install the self-signed certificate for my web server in Android 4.3. I have the .crt file in the root of the SD card (which is actually emulated as I have no SD card in the slot). To ...
10
votes
2answers
523 views

How to know if a webview is using https

As a user, is there a way to know if the page displayed in a webview inside an application is using https or not?
8
votes
1answer
771 views

Let's Encrypt: Is there a workaround for the 2021 SSL "cutoff" for pre-7.1.1 Android devices?

In January 2021 all devices with Android prior to 7.1.1 will not be able to connect to HTTPS servers using Let's Encrypt certificate (Let's Encrypt blog post explaining the details) Is there any ...
7
votes
2answers
1k views

How does Android handle wifi root CAs? Should they be a security concern?

My university requires me to install a custom root CA to connect to their wifi network. When I installed it on my phone, it let me specify "Wifi" or "VPN and apps". I chose wifi, and was able to ...
5
votes
0answers
2k views

How to remember/cache a client certificate

I support a web-application that requires an https connection with client certificates as part of the authentication scheme. On most browsers (Desktop clients, iOS Safari, etc) if you are prompted for ...
4
votes
1answer
7k views

Android support for TLS

I have found that TLS1.1 and TLS1.2 is supported from API level 16 and on by default from API level 20. This corresponds to Android 4.1 (supported) and Android 4.4W (wearable) or Android 5.0 (on by ...
3
votes
2answers
541 views

Is Android susceptible to OpenSSL vulnerabilities? [duplicate]

There has been a big vulnerability discovered in OpenSSL today, are android applications affected, and what can we do to get a secure version? What about people with older devices (such as the HTC ...
3
votes
1answer
49 views

How can I get back lost internet access on Android 4.x or lower?

I have an Acer A500 tablet running Android 4.0.3. Trying this after not using for some time I find it can't access most websites, getting "Webpage not available" in Opera Mini browser. I ...
3
votes
1answer
7k views

Decrypting HTTPS Traffic from Android Apps via Fiddler?

I am actually trying to debug all the traffic going in and out on my phone. I am using Fiddler on my PC, and ProxyDroid on my phone to do this. HTTP traffic works fine. I am able to decrypt it ...
3
votes
1answer
211 views

How can I view a TLS 1.2 only website on an outdated tablet?

I have a tablet from 2011 (Prestigio MultiPad PMP3384B) with Android 2.3 which I use occasionally. I’ve experienced recently that I cannot view some webpages (https://www.nytimes.com/, for example) as ...
3
votes
3answers
18k views

How to Bypass Certificate Errors in Google Chrome Android?

Apparently desktop Chrome has a flag called --ignore-certificate-errors that allows you to bypass all certificate warnings. Is there an equivalent for Android Chrome? I checked in chrome://flags but ...
2
votes
2answers
963 views

How to browse securely, anonymously and without blocks on Android?

So here's your Average Joe at a coffee store, using the open Wifi on his shiny new Android phone. Obviously there are the same issues with using a laptop or any other device on an open network, ...
2
votes
1answer
6k views

How to set Wi-Fi HTTPS proxy, not HTTP, via adb shell?

For HTTP I found a link: How to set WIFI proxy via adb shell? But I want to setup HTTPS proxy via adb shell.
2
votes
3answers
11k views

Where to get OpenSSL binary for Android?

I have a Nexus 10 (unlocked & rooted) and I wanted to get the openssl binary on there so I can verify HTTPS certificates: $ openssl s_client -connect <IPADDRESS> However, no matter what I ...
2
votes
1answer
3k views

Connection to home server via https – works with WiFi, but not with 3G

I have a very weird issue with my phone (Alcatel 997D running Android 4.0.4). Let me start at the beginning. I provide certain services (mostly syncing stuff, Firefox and Cal/CardDAV) on a server with ...
2
votes
1answer
10k views

Unable to open secure HTTPS websites on the tablet Android

My laptop and tablet are connected to the same access point. The LAN port of the WiFi point is connected to the router that uses DHCP protocol. I can access all the websites including secure ones ...
2
votes
1answer
1k views

How do I import a user CA for the Email app properly?

For my own setup I use a personal CA: "Gert van Dijk CA". I'm using this for HTTPS and VPN successfully by importing the CA certificate into the Android keystore. I'm having trouble getting the Email ...
2
votes
0answers
327 views

Adding a self-signed certificate to the trusted list? [duplicate]

I have my own self-signed SSL certificate for a website I need to keep relatively secure. I've been able to install my client SSL certificate just fine, but I can't seem to install the server's ...
2
votes
0answers
10k views

Resolving SSL Protocol Error on data connection but not on wifi [closed]

When I try to access secure web sites via https (ssl), I get an error. Chrome error message: Error 107 (net::ERR_SSL_PROTOCOL_ERROR) SSL_Protocol Error Firefox error message: ...
2
votes
0answers
790 views

Shortening URLs using goo.gl and Tasker

I'm trying to use Tasker to shorten URLs. Previously, I don't think this was possible, but v1.3 added support for https. I've tried following the instructions here: https://developers.google.com/url-...
1
vote
1answer
2k views

Is there a web browser for the 1st generation Kindle Fire that uses TLS1.2 or higher?

Various websites are starting to fail to load in the built-in Silk web browser, and I've tracked the issue down to the fact that Silk uses only TLS 1.0. TLS 1.0/1.1 is outdated and insecure to such ...
1
vote
1answer
569 views

Page can't be loaded in S4 using http, but it does in https

I'm having special issues loading a website in my Galaxy S4, either Chrome and the default browser. In my case, when I try to access a website file using http, it throws an error 500, while accessing ...
1
vote
1answer
292 views

What's a secure way to message/talk to someone in CM9?

I'm using CM9 nightly (20120712 i.e. today). I need to talk securely, without the chance of eavesdropping, to someone who also has CM9 nightly (not sure how up-to-date but not more than 1 month old). ...
1
vote
1answer
118 views

Is there a way to capture HTTP requests from an installed Play Store app?

I'm developing a search aggregator service so I'd like to get the endpoint of some of the stores that, currently, doesn't expose their API. So I'd like to now if there's a way to do this with my ...
1
vote
1answer
234 views

SSL error on Firebase hosting on old Android devices

I am not being able to see my Firebase Web App on old Android Devices due to SSL error. There is a question about this, but the answer doesn't say how to solve it. Is there any solution for this?
1
vote
1answer
821 views

Unable to install a modified apk file

I want to monitor the https traffic of an Android app downloaded from google play. This app can only be run at Android N and above. So I use Charles proxy and follow this document to modify the apk ...
1
vote
1answer
402 views

How to inspect HTTPS traffic of a third-party app on Android 9+

I want to inspect inside HTTPS-encrypted packets that an app is sending. It is not my app, I don't have its source code. My device is rooted, so I can modify /system/etc/security/cacert if needed, ...
1
vote
1answer
1k views

Using Gmail app on a public WiFi

Does official Gmail app use a secure connection? This post above discussing whatever Gmail using a secure connection, but is it relevant to a public WiFi connection? Or in public WiFi, is there a ...
1
vote
1answer
770 views

Android browser: how to revoke ssl permission on a single site after giving it?

I'm building a website under ssl certificate. It just works on desktops but android browser argues that the ssl authority is not trustworthy. So to see the staging site I told it to just consider it ...
1
vote
1answer
2k views

Android does not download any files from untrusted CA certificate site

I work on a site that serves mobile phones and shares some file. When I publish my site in http everything works great. But when I activate SSL and publish my site via HTTPS with my own certificate, ...
1
vote
2answers
6k views

Setting up an HTTPS proxy

I use proxifier to connect to an HTTPS proxy on the PC, what should I do in order to connect similarly on my Android smartphone? My Android version is 4.3, Jelly Bean.
1
vote
0answers
772 views

HTTP/HTTPS Transparent Proxy on Android

So on linux, I use transparent mode of mitmdump (mitmproxy without interaction) to build a websites filter and I run it as root on startup so that it cannot be killed if the user does not have sudo ...
1
vote
0answers
966 views

Cannot connect to HTTPS sites due to device clock being ahead

I cannot access 'My Search.com' I just set as my homepage (Brave browser) and Yandex for my search engine (new install). I got an error saying that my (device) time is ahead. Your clock is ...
1
vote
0answers
790 views

Bypassing certificate pinning with integrity checks on Android 7 (Nougat) or newer

How can I bypass Certificate Pinning, or bypass SSL verification entirely, in an Android app on Android 7 or newer that has a built-in hash 'integrity check' to rule out APK modification? Here is a ...
1
vote
0answers
1k views

Can't visit " https " sites with an Android device using Wi-Fi

I have a strange problem on one of my old phones. I have an old Android device running Android 2.3.4, and it works perfectly. But, I found that, it can't access to https sites with the basic browser ...
1
vote
0answers
131 views

Removed trusted CA's now can't use Google.........Anything!

My boyfriend accidently hit the 'Remove all stored credentials' and now he can not access anything Google, but most importantly the Play Store. OK it might have been on purpose, don't ask, but now it'...
1
vote
0answers
760 views

How are certs validated against default trust store?

Through some reading, I have a fairly rough understanding about how https works with Android apps, especially how are certificate validations done. Some of the resources that I referred to for gaining ...
1
vote
0answers
175 views

Why is Chrome on Android sending my HTTP requests to an IP owned by DoD?

When I make http requests to my website with Chrome Browser on android 6.0 (Nexus6) I saw that it is making requests to 130.90.151.44 instead of the IP of my webserver. If I use another browser, it ...
1
vote
0answers
1k views

Why won't my Android phone access any HTTPS websites through WiFi?

My Samsung Galaxy Note 3 can not access any secured website while connected via my home WiFi – even applications like Google Search and Facebook can't access the internet and give an error saying "...
1
vote
0answers
232 views

remove RC4 from SSL/TLS ciphers

is there a way to remove RC4 from SSL/TLS ciphers in android system wide such that also apps and not only the browser doesn't use them anymore? Thanks
1
vote
0answers
917 views

Unable to open Google's secure websites over HTTPS

I can easily open https secured sites on my Win7 laptop (using Google Chrome). But this is not possible with Chrome version 18.0.1025308 on my ONDA VI30W tablet (running ICS 4.0.3). What do I need to ...
0
votes
1answer
6k views

How to resolve "enter the password for credential storage" issue?

So I am playing around with fiddler web proxy. I need to decrypt https traffic. So I am trying to put the fiddler root CA cert in my device trust store. But it keeps asking me "Enter the password for ...
0
votes
1answer
1k views

Is there a known issue with HTTPS and the Android browser?

I have a Galaxy S2 running 2.3.3, all up to date and not rooted. On several sites I find that logging in is impossible due to requests sent on HTTPS not returning a response. I've not tested the ...
0
votes
0answers
25 views

Let's Encrypt Root certificate expired on old Android tablet. How to fix? [duplicate]

I have an old Android tablet, and websites with Let's Encrypt SSL certificates no longer works. On Let's Encrypt's web site they basically just says it should still work But in my case, it doesn't, I ...
0
votes
0answers
19 views

Is there a way that I can "share" images by sending them to an HTTP endpoint?

I want to make some hacky prototypes where I use my phone to collect data and then process it with a regular program. For this I want to share images with an HTTP endpoint written by me to execute ...
0
votes
0answers
11 views

Installing Charles proxy certificate on Samsung

I have a problem with Charles proxy certificate on Samsung phone. On Xiaomi everything works fine. But when I try to decrypt traffic on my Samsung device I can't do it - SSL handshake with client ...
0
votes
0answers
96 views

Adguard HTTPS filtering

Are there any Reviews/audits verifying the security of the Adguard HTTPS filtering (interception)? I know that any MITM software is a security risk, but without this feature ads are not blocked on ...
0
votes
0answers
43 views

Extracting user-installed certificate

I have a rooted Android 9 device that has a couple of user-installed CA certs installed that I'd like to extract. When I open Settings -> Security -> Encryptions & Credentials -> Trusted ...