Android Enthusiasts Stack Exchange
Android Enthusiasts Stack Exchange

Questions tagged [https]

86 questions
24
votes
3 answers

How do I install a user certificate?

I have my own Root certificate that signs user certificates. I have a site that will only allow you on with a user certificate which is signed by the root ca. I have managed to get this site working in Ios and Windows, but just can't get it working…
William Hilsum
  • 341
  • 1
  • 2
  • 4
22
votes
1 answer

What Trusted Root CAs are included in Android by default?

There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone by default? With the number of root certificates…
GAThrawn
  • 22,094
  • 9
  • 79
  • 127
19
votes
1 answer

self-signed certificate install claims success, but android acts as if cert isn't there

I am trying to install the self-signed certificate for my web server in Android 4.3. I have the .crt file in the root of the SD card (which is actually emulated as I have no SD card in the slot). To install the certificate I go to Setting -> General…
Michael
  • 1,413
  • 9
  • 29
  • 49
10
votes
2 answers

How to know if a webview is using https

As a user, is there a way to know if the page displayed in a webview inside an application is using https or not?
Midhat
  • 211
  • 1
  • 4
9
votes
1 answer

Let's Encrypt: Is there a workaround for the 2021 SSL "cutoff" for pre-7.1.1 Android devices?

In January 2021 all devices with Android prior to 7.1.1 will not be able to connect to HTTPS servers using Let's Encrypt certificate (Let's Encrypt blog post explaining the details) Is there any workaround that's system-wide (i.e. all apps, not just…
Alexander M
  • 193
  • 1
  • 7
9
votes
2 answers

How does Android handle wifi root CAs? Should they be a security concern?

My university requires me to install a custom root CA to connect to their wifi network. When I installed it on my phone, it let me specify "Wifi" or "VPN and apps". I chose wifi, and was able to connect successfully. However, I'm concerned about the…
Alejandro Ramallo
  • 191
  • 2
8
votes
1 answer

Why are Let's Encrypt security certificates invalidated prior to schedule on affected Android devices?

According to a well-regarded QA answer by a member of our Android community here on Stack Exchange: By the current schedule, Let's Encrypt cross signing will end on September the 30th 2024. After this date Android 7.1 stock devices will become more…
Amazon Dies In Darkness
  • 4,864
  • 25
  • 66
  • 108
7
votes
2 answers

HTTPS filtering breaks some apps

I have enabled HTTPS filtering in AdGuard. I installed AdGuard's certificates, and the Magisk module that moves the certificates to the system store. Nevertheless, some apps don't work. Why is this? If the certificate is in the system store how can…
lamppost01
  • 91
  • 4
7
votes
0 answers

How to remember/cache a client certificate

I support a web-application that requires an https connection with client certificates as part of the authentication scheme. On most browsers (Desktop clients, iOS Safari, etc) if you are prompted for a client certificate and select a valid one the…
Kevek
  • 171
  • 3
6
votes
1 answer

Android support for TLS

I have found that TLS1.1 and TLS1.2 is supported from API level 16 and on by default from API level 20. This corresponds to Android 4.1 (supported) and Android 4.4W (wearable) or Android 5.0 (on by default) From a server perspective this means that…
Silver
  • 163
  • 1
  • 6
5
votes
1 answer

Firefox for Android refuses loading any website

I wanted to give Firefox for Android a try (I'm a long-time Chrome user), but after installing it from the Play Store, I discovered it refuses to load any website, always showing this security warning that cannot be ignored: This happens on all…
Master_T
  • 293
  • 1
  • 3
  • 6
5
votes
3 answers

How to Bypass Certificate Errors in Google Chrome Android?

Apparently desktop Chrome has a flag called --ignore-certificate-errors that allows you to bypass all certificate warnings. Is there an equivalent for Android Chrome? I checked in chrome://flags but nothing there.
gravitation
  • 163
  • 1
  • 1
  • 7
4
votes
3 answers

Where to get OpenSSL binary for Android?

I have a Nexus 10 (unlocked & rooted) and I wanted to get the openssl binary on there so I can verify HTTPS certificates: $ openssl s_client -connect However, no matter what I do I can't find a simple way of getting OpenSSL on Android…
void.pointer
  • 267
  • 2
  • 4
  • 9
4
votes
0 answers

Cannot add new Certificates to Android Device

Using a Pixel 6a, running Android 13. I am trying to install certificates from a private CA I have established on the internal network. I was able to install the root certificate by doing the following: Settings > Security & Privacy > More security…
JLCarveth
  • 41
  • 3
3
votes
2 answers

Is Android susceptible to OpenSSL vulnerabilities?

There has been a big vulnerability discovered in OpenSSL today, are android applications affected, and what can we do to get a secure version? What about people with older devices (such as the HTC desire HD I have) that are on old android versions…
Andrew M
  • 830
  • 1
  • 7
  • 12
1
2 3 4 5 6