7
votes
Accepted
Let's Encrypt: Is there a workaround for the 2021 SSL "cutoff" for pre-7.1.1 Android devices?
Update 2023-07-11
By the current schedule, Let's Encrypt cross signing will end on September the 30th 2024. After this date Android 7.1 stock devices will become more or less useless for Internet ...
- 18.6k
7
votes
Accepted
Android support for TLS
Assuming you are not doing Android development, you do not need to worry about Android version.
Any serious security-minded application like Chrome on Android will use TLS 1.2. You can verify this ...
- 4,211
4
votes
Accepted
Is there a web browser for the 1st generation Kindle Fire that uses TLS1.2 or higher?
Firefox 47 can be installed on the 1st generation Kindle Fire. It supports TLS 1.2.
Download link: Mozilla's official FTP.
- 56
3
votes
How to set Wi-Fi HTTPS proxy, not HTTP, via adb shell?
This question is a near duplicate of questions like this and this, and closely related to this and this. In fact it can be better explained by a developer, but since it keeps on appearing again and ...
- 19.7k
3
votes
How to find HTTP requests in apk source code
There are many ways you can try
First option is to Reverse engineer code into dex and decompile using any tool like fernflower or CFR. Then apply regex extract script to pull all the http links. ...
- 31
3
votes
Accepted
Firefox for Android refuses loading any website
After doing more digging, it seems the problem was my adblocker (AdGuard). It uses a locally installed CA certificate in order to filter HTTPS traffic. By default Firefox ignores local CA certificates,...
- 273
2
votes
How do I install a user certificate?
Go to Settings > Security > Credential storage > Install from SD card. If it's not there you may need a newer Android version or a workaround which I don't know about.
- 437
2
votes
Accepted
Unable to install a modified apk file
The generated APK file by apktool needs to be signed before you can install it on a Android phone or emulator:
First you have to create a key-pair for signing stored in a keystore (only required once):...
- 18.6k
2
votes
How can I get back lost internet access on Android 4.x or lower?
The problem with the root-CA certificate is not the only one you are facing:
Devices with Android version 4.4 and before have problems accessing a lot of https sites because they do not support TLS 1....
- 18.6k
2
votes
Accepted
How can I import a Root CA that's trusted by Chrome on Android 11
The error indicates that the root CA certificate is the cause, but your server certificate also looks "defect" as it's validity period is too long. Most web browsers do no accept validity ...
- 18.6k
1
vote
Accepted
Intermitent SSL_PROTOCOL_ERROR when using Android Wi-Fi hotspot
I fixed the issue, turns out the default APN was not correctly configured.
I re-configured my APN with the configuration given by my phone provider (for Orange in France, the config is here: https://...
- 11
1
vote
What can I do to upgrade an old Android 4.0.3 tablet?
Yes, it is possible. Jailbreak to get root rights needed. Enthusiasts do wonders.
A minute of searching DevicseName ROM/image/firmware and we have a range of many variants.
The maximum Android 6 for ...
1
vote
Is there a way to capture HTTP requests from an installed Play Store app?
Yes, you can do it on your phone alone. I use HttpCanary App with root access. It works without root as well but only a few apps that don't use certificate pinning.
- 111
1
vote
SSL error on Firebase hosting on old Android devices
SSL/TLS support is based on the Android version. There's no way for Android end-users to fix this issue unless to upgrade to a newer Android version if possible.
In this case, based on Qualys SSL ...
- 15.3k
1
vote
How to inspect HTTPS traffic of a third-party app on Android 9+
As tipped by @beeshyams, HttpCanary is perfect for this.
You need a rooted device, of course.
HttpCanary takes care of all of the difficult steps (certificate generation and installation) ...
- 5,216
1
vote
How does Android handle wifi root CAs? Should they be a security concern?
A certificate authority signs digital certificates. Often times companies will pay an internationally trusted CA such as VeriSign or DigiCert to sign certificates on their own domain.
In some cases ...
- 121
1
vote
Using Gmail app on a public WiFi
The GMail application is now a general email application. You can set it up to talk to any email account. There are two important cases:
You use the GMail application with a GMail account, for ...
- 4,211
1
vote
Connection to home server via https – works with WiFi, but not with 3G
As you say that the problem exists only on 3G and not on WiFi, this is probably because of some problem with the Access Point of the your network provider. I faced a similar issue sometime back which ...
- 121
1
vote
Where to get OpenSSL binary for Android?
The link in other answer is expired.
Built my own, for various archs:
https://vi-server.org/pub/openssl_1.1.1_android_static_arm
https://vi-server.org/pub/openssl_1.1.1_android_static_aarch64
https:/...
- 1,645
Only top scored, non community-wiki answers of a minimum length are eligible