ConscryptTrustUserCerts icon indicating copy to clipboard operation
ConscryptTrustUserCerts copied to clipboard

certificate store is empty

Open n0101 opened this issue 1 year ago • 8 comments

After flashing this the system certificates and user certificates are empty.

n0101 avatar Dec 15 '23 13:12 n0101

Same here

ecostin avatar Dec 24 '23 00:12 ecostin

Try this: https://github.com/lupohan44/TrustUserCertificates

lupohan44 avatar Jan 05 '24 23:01 lupohan44

Same here

Try this: https://github.com/lupohan44/TrustUserCertificates

lupohan44 avatar Jan 05 '24 23:01 lupohan44

Hi @n0101 @ecostin. Could you provide more information about the device you are using and its Android version? Thanks!

xcervillancc avatar Jan 10 '24 08:01 xcervillancc

@lupohan44, With Pixel 7, Android 14, December 2023 update - it works. But still there is message that network can be monitored. When I remove local cert - warning is gone. Probably till next phone reboot because system cert would be removed.

kbzowski avatar Jan 10 '24 11:01 kbzowski

@lupohan44, With Pixel 7, Android 14, December 2023 update - it works. But still there is message that network can be monitored. When I remove local cert - warning is gone. Probably till next phone reboot because system cert would be removed.

Hi, this is because this module does not remove certificate from user store.

lupohan44 avatar Jan 10 '24 16:01 lupohan44

@lupohan44, With Pixel 7, Android 14, December 2023 update - it works. But still there is message that network can be monitored. When I remove local cert - warning is gone. Probably till next phone reboot because system cert would be removed.

Hi, please try v1.2. It should support adding certificate into a different folder now.

lupohan44 avatar Jan 10 '24 22:01 lupohan44

After flashing this the system certificates and user certificates are empty.

I have a similar issue, but it's more complex than that…

  • Pixel 8, Android 14, stock but rooted with Magisk 27.0 / App 28.1.
  • The "system" store shows up as empty, but the "user" store shows the one mitmproxy certificate that I intentionally installed
  • Even thought the system store appears empty, it appears that I can still validate against well-known root CAs in it. :thinking: :man_shrugging:

dlenski avatar Jan 12 '25 04:01 dlenski