Wiki page ssl changed with summary [[Android] added system trusted credentials and magisk module Magisk Trust User Certs] by Daniel

This commit is contained in:
ORG-wiki 2023-01-26 08:00:30 +01:00
parent 46e0466dcc
commit 2f8e2c6a2f
1 changed files with 23 additions and 0 deletions

View File

@ -140,6 +140,8 @@ sudo trust anchor --store rootCA.pem
==== Android ====
=== User trusted credentials ===
''Settings'' - ''Security'' - ''Encryption and credentials'' - ''Install a certificate''
Check under:
@ -147,6 +149,27 @@ Check under:
''Settings'' - ''Security'' - ''Trusted credentials'' - ''User''
=== System trusted credentials ===
If "User trusted credentials" is not enough and you'll need the certificate in system, follow the next lines. It needs a rooted device though:
<code>
hashed_name=`openssl x509 -inform PEM -subject_hash_old -in rootCA.pem | head -1` && cp rootCA.pem $hashed_name.0
ls $hashed_name.0
</code>
<code>
adb root
adb shell mount -o rw,remount /
adb push hashed_name.0 /system/etc/security/cacerts/hashed_name.0
adb shell chmod 644 /system/etc/security/cacerts/hashed_name.0
adb shell chown root:root /system/etc/security/cacerts/hashed_name.0
adb shell reboot
</code>
You can also use the Magisk module "[[https://github.com/NVISOsecurity/MagiskTrustUserCerts|Magisk Trust User Certs]]" which does the same as above.
===== Nginx =====