3

As of Android 7.0 no custom certificate will be used by android apps. App developers need to specifically write codes and change app settings to follow a custom CA.

But this is difficult while testing for certificate pinning in a UAT environment. As a solution I wanted to add the custom CA certificate of my proxy tool (burp or ZAP) to androids system folder.

How to do this? To which folder the certificate needs to be copied? I am using an emulator. So is there a way to do this without rooting the emulator?

Ref: First answer of this question.

1

Magisk claims to do this.

This module makes all installed user certificates part of the system certificate store, so that they will automatically be used when building the trust chain.

  • That tool feels so dangerous, if it does what it claims – bradbury9 Apr 24 at 11:05

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.