search

NVISOsecurity / MagiskTrustUserCerts

A Magisk/KernelSU module that automatically adds user certificates to the system root CA store
1.63k stars 190 forks source link

Android 14 #31

Open UjuiUjuMandan opened 8 months ago

UjuiUjuMandan commented 8 months ago

Add this line to head of post-fs-data.sh to support Android 14.

mount -o bind /system/etc/security/cacerts /apex/com.android.conscrypt/cacerts

Source: https://archive.today/2023.10.11-115149/https://weibo.com/3322982490/Ni21tFiR9

mrdong916 commented 7 months ago

https://github.com/nccgroup/ConscryptTrustUserCerts try it, i`m ok

UjuiUjuMandan commented 4 months ago

It somehow stopped working, I don't know if it's Magisk or my ROM's update breaks it. I'm using https://github.com/lupohan44/TrustUserCertificates instead anyway.

641i130 commented 1 month ago

Following this method worked better for my setup: https://httptoolkit.com/blog/android-14-install-system-ca-certificate/

juvannx commented 1 month ago

Following this method worked better for my setup: https://httptoolkit.com/blog/android-14-install-system-ca-certificate/

Thanks for the link, certainly interesting, but the module suggested by @UjuiUjuMandan works perfectly and does exactly the same thing.

drwpls commented 2 weeks ago

Add this line to head of post-fs-data.sh to support Android 14.

mount -o bind /system/etc/security/cacerts /apex/com.android.conscrypt/cacerts

Source: https://archive.today/2023.10.11-115149/https://weibo.com/3322982490/Ni21tFiR9

Another solution, just replace /data/adb/modules/trustusercerts/post-fs-data.sh as 

#!/system/bin/sh
mount -t overlay overlay -o lowerdir=/system/etc/security/cacerts:/data/misc/user/0/cacerts-added /system/etc/security/cacerts

This allows you to dynamically add system CA, just add user CA, system CA will be there without restart device.