[Q] Install trusted CA certificate on Android (HTC Vision / Desire Z / G2) - Android Software/Hacking General [Developers Only]

Hi there,
I have downloaded a root CA certificate and now I want to install it on my Android Froyo device (HTC Vision / Desire Z / G2), so that the device trusts the certificate and does not complain about an untrusted certificate every time I start an SSL connection.
Android stores CA certificates in its Java keystore in /system/etc/security/cacerts.bks. I copied the file to my computer, added my certificate using portecle 1.5 and pushed it back to the device.
Now, Android does not seem to reload the file automatically. I have read in several blog posts that I need to restart the device. Doing so results in the file being overwritten with the original one again.
My next try was to install the certificate from SD card by copying it and using the according option from the settings menu. The device tells me that the certificate has been installed, but apparently it does not trust the certificate. Moreover, when I try to copy the keystore to my computer, I still find the original stock cacerts.bks.
Is there any way to add my certificate to the trusted ones? What mechanism restores the original keystore on every boot? Can I reload the keystore without rebooting? This would be at least a preliminary solution. Is there a chance do do it programmatically?
Thanks in advance!

Related

installing certificates

can anybody help me how to install some certificates? I need one to connect to the wifi in my school.. I tried make a cab but it do not works..
Copy the certificate file to your device, open file explorer and click the file You should see message "Certificates were installed"... I think that's all, at least that's how it worked for me
It does not work for me .. I have tried it.. It says it can not open such file
Try using .cer files. If your school doesn't have those, try googling some converter from other formats to .cer
thank you a lot..it worked...don´t you know how should I use this certificate when I´am logging in to the wifi in school?
just turn on Wi-Fi and follow the instructions on screen. You will just have to choose correct encryption type, input username and password and then it will automatically use installed certificate to ensure that the connection is secure.
certificates - how to make your own?
Dear Forum, I really have problems with several apps, having .Net-framework 2.0 AND 3.5 installed at my devices - My problem: some apps simply don`t run, even by changing the Application policy from one to the other or to default.
I oftenly get the error - GNAgent.exe - .......
So if I would be able to create my own cert can I give allowences to several apps with problems?
thxs for answering
regards
seeraeuber said:
Dear Forum, I really have problems with several apps, having .Net-framework 2.0 AND 3.5 installed at my devices - My problem: some apps simply don`t run, even by changing the Application policy from one to the other or to default.
I oftenly get the error - GNAgent.exe - .......
So if I would be able to create my own cert can I give allowences to several apps with problems?
thxs for answering
regards
Click to expand...
Click to collapse
Hi, why do you think your own certificate will help?
GNAngent.exe is part of Google Navigator, maybe uninstalling (or reinstalling) it will solve your problems as well.
Anyway, here is a mention how to install self-signed cert: http://forum.xda-developers.com/showthread.php?t=281723
You can also try DisableCertChk utility.

Download Wifi Certificate to install

I'm trying to connect my HTC Desire to my university's Wifi and I'm running into the common problem of the security certificate issue. (After connecting says there is an issue with the certificate, then after continuing get connecting error.)
The problem I'm having is that I can't get the certificates any other way, are the certificates stored on the phone somewhere, or is there a way I can force them to be download or something along these lines?
Thanks!
I had used my work wifi settings for linux (including manually creating a .pem file & editing wpa_supplicant.conf file to connect . Check if linux instructions work

[Q] Adding Trusted Root Certificate - Android

Hello,
I am trying to add a certificate to several Android devices. One is a Droid X (2.2 Froyo) and another is a Xoom (3.0 Honeycomb). I've converted the certificate to the correct format and added it but it seems like it never adds it to the correct store. Everything I've read says I have to root the device to to modify the certificate manager on the devices. What am I missing? Thanks!

[Q] Difficulties with electonic bankinc certificate

Hi!
At Windows-Firefox I do as follows:
1. Logging into electronic banking site with user name and password
2. At my own profile settings there is a button for installing the CA certificate (direct import into Firefox, no download at PC first and no extra clicking on downloaded file)
3. Installing my own .p12 certificate-file from my PC, (I have the file from the bank)
4. Initializing and electronic signing of transactions etc.
Due to settings from the bank, it works, of course, only if I install the CA certificate from the site first, and after that I install my own .p12 certificate.
So, the same thing, I am trying to do at Android 4, Xperia Mini (not Xperia Mini X10), Android own build in browser.
Here are the steps:
1. Downloading the .crt (not .cer!) file of the CA certificate from the site into my PC, then copying the same .crt file into the main directory of my Xperia internal SD card.
2. Copying the .p12 certificate file from my PC into the main directory of my Xperia internal SD card.
3. Installing the CA certificate from the .crt file at the security settings of Android
4. Installing the .p12 certificate at the security settings of Android
5. Logging in at the Android own build in browser
The pop-up with the correctly installed certificate (.p12) shows normally by logging in. So I am able to get into initializing of a transaction.
But at the confirmation of the electronic signing of the transaction, I am getting a pop-up "unknown error"
Could someone help?
I have no idea about the certificate stuff, but have you tried if Firefox for Android handles them the same way?
[Q] Difficulties with electonic banking certificate
post-mortem said:
I have no idea about the certificate stuff, but have you tried if Firefox for Android handles them the same way?
Click to expand...
Click to collapse
FF for Android had only for the 13 Beta (Fennec) Version an addon (Cert Manager), which is no more compatible with Android 4...
I already contacted the developer... There are still no compatible updates, so we can temporarily forget about working with such certificates on Android-FF...

"No certificate to install" error

Dear forum users,
I had a daunting task to install a certificate manually to the phone. The Samsung is running Android 8.0 and the certificate is a SSL cert for a server with extension .cer.
I have managed to download the certificate from a secure website to the phone and now it sits in Files folder. Every time I try to install the certificate, the phone always says "no certificate to install".
Is there a limitation that what kind of certificate can be installed to different version of Android?
Thanks.
wangjueliang said:
Dear forum users,
I had a daunting task to install a certificate manually to the phone. The Samsung is running Android 8.0 and the certificate is a SSL cert for a server with extension .cer.
I have managed to download the certificate from a secure website to the phone and now it sits in Files folder. Every time I try to install the certificate, the phone always says "no certificate to install".
Is there a limitation that what kind of certificate can be installed to different version of Android?
Thanks.
Click to expand...
Click to collapse
How are you trying to install it? What method/process are you using?
You should be able to go your device's system settings>security settings, in your security settings you should have some kind of option that allows you to change security options, in there somewhere, you should find an option that allows install certificates.
Sent from my SM-S767VL using Tapatalk

Categories

Resources