ys1231 / MoveCertificate

支持Android7-14移动证书,兼容magiskv20.4+/kernelsu/APatch, Support Android7-14, compatible with magiskv20.4+/kernelsu/APatch
https://github.com/ys1231/MoveCertificate
Apache License 2.0
543 stars 66 forks source link

模块生效了,但是证书还是在用户证书下 #17

Closed swift-fs closed 3 months ago

swift-fs commented 3 months ago

出现的问题:证书push到设备之后,重启手机,证书确实被安装了,但不是安装到了系统证书下,还是用户证书。然后导致抓包HTTPS还是有问题。主要mitmproxy官方的magic模块压根没效果,用大佬你这个模块有效果,但是没安装到系统证书下。

install.log的日志:

[iyue_MoveCertificate] Keep only one up-to-date log
[iyue_MoveCertificate] start move cert !
[iyue_MoveCertificate] current sdk version is 34
[iyue_MoveCertificate] Backup system certificates
[iyue_MoveCertificate] Backup system certificates
[iyue_MoveCertificate] Backup user custom certificates
[iyue_MoveCertificate] fix permissions: /data/misc/user/0/cacerts-added/
[iyue_MoveCertificate] fix permissions status:0
[iyue_MoveCertificate] find system conscrypt directory
[iyue_MoveCertificate] find conscrypt directory: /apex/com.android.conscrypt@340090000
[iyue_MoveCertificate] mount: /apex/com.android.conscrypt@340090000/cacerts/
[iyue_MoveCertificate] mount status:0
[iyue_MoveCertificate] move cert: /apex/com.android.conscrypt@340090000/cacerts/
[iyue_MoveCertificate] fix permissions: /apex/com.android.conscrypt@340090000/cacerts/
[iyue_MoveCertificate] move cert status:0
[iyue_MoveCertificate] certificates installed

install14.log的日志:

[iyue_MoveCertificate] Keep only one up-to-date log
[iyue_MoveCertificate] mount: /apex/com.android.conscrypt/cacerts/
[iyue_MoveCertificate] mount status:0
[iyue_MoveCertificate] move cert: /apex/com.android.conscrypt/cacerts/
[iyue_MoveCertificate] fix permissions: /apex/com.android.conscrypt/cacerts/
[iyue_MoveCertificate] move cert status:0

826e964862f9407f64bcfd92d2a658d

ys1231 commented 3 months ago

系统证书里面看不见是正常的,能抓包就行,或者你有强迫症你试一下1.4.7

ys1231 commented 3 months ago

如果把用户证书删了你会发现不能抓包。

ys1231 commented 3 months ago

这个问题不需要处理

swift-fs commented 3 months ago

系统证书里面看不见是正常的,能抓包就行,或者你有强迫症你试一下1.4.7

抓不了,证书不可信,不过我用其他办法解决了

NekoMoYi commented 3 months ago

系统证书里面看不见是正常的,能抓包就行,或者你有强迫症你试一下1.4.7

抓不了,证书不可信,不过我用其他办法解决了

想请教一下是用什么方法解决的,我也遇到了这个问题。感谢!