[Q][Android 6.0] Own CA SSL (HTTPS) with CA CERT warning only? - Android Q&A, Help & Troubleshooting

Hey guys,
I want to enable https on my sm-g900f for my local developer environment, so I created my own self signed root CA certificate. With this cert I sign my local server certificates.
Everything works fine on my desktop devices but not on my android mobile phone.
If I create a rootCA.crt file and convert it to binary .DER type, I'm able to install it on my phone via Settings / Security / Credential storage / Install from storage. HTTPs works now in all browsers and I can see that the cert has been addedd successfully to the Settings > Security > Trusted Credentials > User store. But then I get the "your network may be monitored" warning.
In order to get rid of it I followed the steps described in this thread. The only difference was that my user certs location is /data/misc/user/0/cacerts-added.
After gaining root access and moving the cert via ADB to /system/etc/security/cacerts/ (including chmod and chown) the warning disappeared and I can see that my rootCA is enabled under Trusted Credentials > System*.
As soon as I remove the beforehand added rootCA under Trusted Credentials > User, the warning disappears but https is not working anymore. Chromium gives me this:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Anyone know why my phone/android shows this behaviour?
*(for experts only: also wondering why system/etc/security/cacerts are being displayed as plain ascii text with full cert info although android requires binary format for CA cert?)

For those interested I'm sharing the solution:
Here's what I did to solve this:
(1) flashing my sm-g900f with odin v3.12.4-4 and latest twrp 3.3.0-0-klte
(2) backup relevant data, wipe system/cache/... with twrp afterwards
(3) flash 16.0-nightly-klte addonsu-16.0-arm open_gapps-arm-9.0-nano-20190428
(4) install certificate via security settings options. Shown as 'user cert' but no warning message and ssl works now
Thanks to JW09I4 for helping me out and guiding me through the process of updating my phone.

Related

Stable tutorial for first-timer to maintain an Essential PH-1?

Hello, I've never gone beyond entering developer mode on any of my phones, looking around carefully, then turning that mode off. I own two PH-1 phones, one is in full time service, and I would like to know of a tutorial / step-by-step to do what I need to do to maintain this phone with the images (ROMs?) that are being maintained and updated. I don't need the phone to do anything other-worldly, just keep it updated.
This is the only forum on here I'm allowed to post to, because I've been a listen-only member for a couple years but have never posted. I've just started using Ubunto 20.04 on a new laptop so I can get away from Windows, but I still have a Win7Pro laptop.
Thanks for your recommendations on how to get started -- safely started -- and how to learn what I need to learn.
Also, I just read some of the read-me-first stickys, and please allow this to also be my "Say Hi" email...
"MP"
PS -- I get a captcha, check it, get the green checkmark, but I see *no* image... I'm using firefox w/ NoScript (all scripts enabled for this tab), on an Ubuntu 20.04 laptop.
So no one cares to reply? Did anyone read it besides myself? Whiskeytangofoxtrot
@Messypotamia
If phone's Android OS isn't an A/B-partition-layout-system - what I believe because its Stock ROM is Android 7.1. - then updating a phone's Android requires phone's boot-loader is unlocked. This must get enabled within phone's Developer options - keyword: OEM unlock - what simply sets phone's unlock ability flag to 1 . Additionally it's necessary that ADB ( read: Android Debug Bridge ) gets enabled in phone's Developer options - keyword: USB debugging.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Alter the IR database to send other codes to the TV - Need help

Hey there.
I have since a few days the new ShieldTV remote with IR function and netflix button. Since yesterday I try to change the NvIRTuner.apk (com.nvidia.irtuner) or its database or the IR calls. Unfortunately without success so far.
The database is built very interesting. I'm talking about the O1R_UPDATE_19NOV20.sqlite here.
In the table M_Codes you can find all IR codes. Before the corresponding Java class determines the device which one has selected in the IR-AV-Toogle menu. In my case a LG TV with the id 1970. This Id can be seen in the setup.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Here a Logcat excerpt, if I press my menu button to trigger the HDMI toggle:
07-11 13:37:30.050 4415 4601 D ShieldBluetoothIRInterface: *****REPORT*****0 - Pastebin.com
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
pastebin.com
Good to see the actual IR_Code that is taken, or its alias:
INPUT SCROLL
What I have tried so far:​-I replaced all IR codes in O1R_UPDATE_19NOV20.sqlite with Channel_UP and then moved this db to /data/data/com.nvidia.irtuner/databases with su-rights.
-> Unfortunately the system app com.nvidia.irtuner seems to read the db inital only once. I can't get it to read my db. I don't understand why. No matter if I reset the app, replaced the O1R_UPDATE_19NOV20.sqlite and give appropriate chown and chmod rights or reset the app before.
-My second attempt was a modified APK. Unfortunately, this can not be installed, because it must be signed by nvidia. I have root, but I don't know what to change in the /system/packages.xml so that the system would accept the app.
->When I try to install it, I only get the message that you have to sign this apk appropriately for the user.
-Then I tried to reproduce the service call from the logcat but unfortunately I don't know what to do.
Does anyone have a tip for me?
Greetings by Idijt

General SophiApp - Windows 11 Tweaker

SophiApp. The next chapter of the Sophia Script project;
SophiApp is a free, open-source app for fine-tuning Windows 10 & Windows 11. It offers a modern UI/UX, more than 130 unique tweaks, and shows how Windows can be configured without making any harm to the OS. SophiApp may not work on a homebrew Windows. Especially, if the homebrew image was created by OS makers being all thumbs who break Microsoft Defender and disable OS telemetry by purposely uprooting system components. It's allowed to be logged in as one admin user only during application startup.
SophiApp is fully portable: it doesn't have any config (yet) and doesn't save any data into the registry. Just extract the SophiApp folder with Bin folder and SophiApp.exe.config file, and run SophiApp.exe.
System Requirements;​
​Version​​Marketing name​​Build​​Arch​​Editions​​Windows 11 Insider Preview 23H2​​2023 Update​​25206+​​​​Home/Pro/Enterprise​​Windows 11 22H2​​2022 Update​​22621+​​​​Home/Pro/Enterprise​​Windows 11 21H2​​NA​​22000.739+​​​​Home/Pro/Enterprise​​Windows 10 22H2​​2022 Update​​19045.2006+​​x64​​Home/Pro/Enterprise​​Windows 10 21H2​​October 2021 Update​​19044.1706+​​x64​​Home/Pro/Enterprise/LTSC​
Direct downloads - https://github.com/Sophia-Community/SophiApp/releases/download/1.0.90/SophiApp.zip​
Screenshots;
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Notes;
Some functions depend on Internet access. If not, they will be hidden in UI until the access appears back. You can enable hidden functions in UI by turning on the Advanced settings in the Settings. The hidden functions will be marked with a gear in UI. After closing SophiApp, it creates a log file that you can attach to an open issue (or send to the Telegram group) to help us understand the bug. The log file doesn't contain any sensitive personal information. We do not store any data neither in the Windows registry or any other server.​
Works on Windows 11 22H2
xXx yYy said:
Works on Windows 11 22H2
Click to expand...
Click to collapse
yeah, I used it to tweak abit and uninstalled it
works great too compared with other available tweakers out there ..

Development [STABLE] Windows All-In-One Tool Batch File

[BETA] Windows All-In-One Tool Batch File​
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
A good tool based on Windows batch commands. It has a few commands for now, (already 200 lines, but alright ...) but I will keep updating it and make a good release. It works for now, but not everything is correctly yet.
Download​Source #1: GitHub
How to use​Opening program​All tools/options​1. DISM and SFC Repair - Use this option if you want to check your computer of corrupted Windows files, and recover them if needed.
2. Create Restore Point - Creates a restore point with the name 'Restore Point'. (I might update the name in the future to use something like the date, need to look into that...)
3. Windows IP Configuration - Checks the network settings and show information about the network adapters using the IPCONFIG command.
4. User List - Shows a list of all users that exist on the PC.
5. Check Windows Version - Opens WINVER.exe, from where you can check information about the version of Windows.
6. Ping Tool - Allows you to ping a website.
NOTE: don't add ping before the command! So 'ping -t google.com' becomes '-t google.com' here.
7. N/A yet.
8. Open Terminal - Allows you to open a Windows Command Prompt. (Still need to fix something there).
9. Credits - Shows all the credits for the program (Currently me and Microsoft. Microsoft for developing the possibility to make those easily-to-develop programs)
10. Tool Information - Shows information about the batch file/tool.
11. Exit - Closes the tool.

How To Guide Huawei Cloud on the new Honor.

This will not give you the opportunity to make a full backup, but it will partially allow you to get into the cloud and save your data. I was able to create a backup on the Honor 50 and after that I restored it on the Huawei tablet.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
1. Naturally, you must have Huawei HMS Core services
2. Perhaps there should be a frame
3. Install this version of the cloud (you can't update, only it works)
4. After installation, immediately open and give all permissions except geolocation (I gave it to it, but it seems to me that it interferes)
5. To log in to the cloud, you have two options
1: Through the button in the curtain
2: Installation Manager tab in AppGallery
6. Two buttons do not work, "Settings" and "Memory Management", you should not touch them - the cloud flies out of control
7. We saw the cloud, but they don't allow us to make a backup, the program writes an error both during recovery and when trying to create a backup, the "System Dispatcher" prevents us from doing this.
8. In developers, we set to allow debugging and debugging only when charging. Install ADB AppControl on the PC, connect the phone through it and remove the ADB "System Dispatcher".
9. After the backup, the dispatcher must be returned, without it we lose battery control, etc.
The data is saved only partially: contacts, messages, photos, videos and some programs. I can't save the settings because the dispatcher is turned off. I'm sorry, I'm writing through a translator, I hope it's clear.
Hey there I'm trying to install the cloud app into my honor 50 but I'm always getting this error. Do you have any idea what is the conflicting app? is a while that I am trying to figure it out but I am unable. T
hank you
synescu said:
the conflicting app?
Click to expand...
Click to collapse
I had a conflict if I tried to install "Files" from Huawei first. If you did not install this, then try to install from a third-party file manager, I put all of the X-plore.

Categories

Resources