Failed to move the AdGuard Personal CA to the system store

[4adbfa76]

Please answer the following questions for yourself before submitting an issue

• [x] Filters were updated before reproducing an issue
• [x] I checked the knowledge base and found no answer
• [x] I checked to make sure that this issue has not already been filed

AdGuard version

4.12.1

Environment

• OS version: Android 16
• Device: Redmi Note 10 Pro

HTTPS filtering

• [x] yes, I do

Root access

• [x] yes, I have it

Integration with AdGuard VPN

• [ ] yes, I do

Routing mode

Automatic proxy

Ad Blocking

AdGuard Base filter

Privacy

AdGuard Tracking Protection filter

Social

AdGuard Social Media filter

Annoyances

AdGuard Annoyances filter

Security

Online Malicious URL Blocklist

Language-specific

No response

Other

No response

Which DNS server do you use?

Custom DNS

DNS protocol

DNS-over-HTTPS

Custom DNS

https://d.adguard-dns.com/dns-query/f22d391e

What Stealth Mode options do you have enabled?

Protect against DPI

Issue Details

Steps to reproduce:

1. All fail to connect to the internet the first try
2. Try to connect again then it does connect
3. Then it's blocked again

Expected Behavior

Connect without a problem or manually trying to reconnect again since no filters is blocking connection.

Actual Behavior

Legitimate https requests is blocked by adguard without any filter doing the blocking or a way to unblock it.

Screenshots

Screenshots ✅

Additional Information

Added by @Versty

Failed to move the AdGuard Personal CA to the system store, see the https://github.com/AdguardTeam/AdguardForAndroid/issues/5881#issuecomment-3417392740

[4adbfa76]

[4adbfa76]

https://github.com/user-attachments/assets/b9971ab5-4042-4c6e-899c-c8d074337c67

Can't also move adguard certificate to system store.

[muchqs]

I noticed this too, and it's been going on for a very long time already.

Some legit connections are randomly blocked while showing "No applied rules".

Here's an example: https://i.imgur.com/T1t3iOO.jpg

This URL is a legitimate shortlink service used by Shopper's Drug Mart stores in Canada. https://en.wikipedia.org/wiki/Shoppers_Drug_Mart

I do not have "Protect against DPI" enabled in AdGuard like the OP. I do not have other blockers enabled in the Vivaldi browser in the screenshot.

When the URL is blocked by AdGuard, I can use Firefox that I have set up to not be filtered by AdGuard to connect just fine. Then after a while, Vivaldi, being filtered by AdGuard still, can suddenly connect fine too.

???

[4adbfa76]

can suddenly connect fine too.

It can connect fine after you try connecting again, then it does not get blocked the second time.

[4adbfa76]

I also notice that using the AdGuard Certificate magisk module, certificate does not show up in the system store.

[jo2dan94]

[jo2dan94]

Same

[jo2dan94]

[jo2dan94]

@Versty any idea about this

[4adbfa76]

I have stopped the use of AdGuard because of this issue.

[jo2dan94]

No dev input I guess

[Versty]

@4adbfa76 Hi!

Legitimate https requests is blocked by adguard without any filter doing the blocking or a way to unblock it.

This issue is discussed in https://github.com/AdguardTeam/AdguardForAndroid/issues/5905#issuecomment-3607432266.

In short, this behavior is intended, but we would like to add an explanation for this type of blocked request in future versions: https://github.com/AdguardTeam/AdguardForAndroid/issues/5942.

Can't also move adguard certificate to system store.

Could you please collect the logs from your device by following the steps below so we can take a closer look at the problem?

1. Enable debug logging: Settings -> General -> Advanced -> Logging level -> Debug.

2. Reproduce the problem, then remember the exact time when it happened.

3. Collect logs: Settings -> General -> Advanced -> Export logs and system info.

4. Send this file to [email protected]:

   • include [android] keyword and 5881 in the subject of your email
   • specify the exact time when the issue occurred

[4adbfa76]

@Versty I have sent the logs.

[Versty]

@4adbfa76 The logs show that /system cannot be found in /proc/mounts, so it cannot be mounted. Could you provide more details about your root setup?

[4adbfa76]

@Versty