Revision history [back]

I needed a way to import own TLS certificates so that Android apps trust them. This is different to adding certs to SfOS, the Android subsystem doesn't use the same cert store as Sailfish does.

${yourCert.pem} denotes the certificate you want to import

• Add plaintext description: don't think that's really necessary, but all other certs I found in the certificate directory looked the same way. Besides, it is helpful to identify the certificate later.

  openssl x509 -in ${yourCert.pem} -noout -text >> ${yourCert.pem}

• determine md5 hash which will become part of the file name:

  openssl x509 -subject_hash_old -noout -in ${yourCert.pem}

• copy to proper location:
  I also tried /opt/alien/data_jolla/misc/keychain/certs-added/ (would be cleaner to put it there), but K-9 Mail didn't used it from there

  mv ${yourCert.pem} /opt/alien/system/etc/security/cacerts/${theMD5Value}.0

• Reboot, just to be sure

References: https://blog.kylemanna.com/android/android-ca-certificates/#installing-a-root-ca-certificate-on-android

I needed a way to import own TLS certificates so that Android apps trust them. This is different to adding certs to SfOS, the Android subsystem doesn't use the same cert store as Sailfish does.

${yourCert.pem} denotes the certificate you want to import

I needed a way to import own TLS certificates so that Android apps trust them. This is different to adding certs to SfOS, the Android subsystem doesn't use the same cert store as Sailfish does.

${yourCert.pem} denotes the certificate you want to importimport.

The first two steps require openssl. -> You need developer mode enabled to install openssl:

pkcon install openssl

You can also perform these steps locally on your Linux machine and not on the phone.

1.Add plaintext description: don't think that's really necessary, but all other certs I found in the certificate directory looked the same way. Besides, it is helpful to identify the certificate later.

openssl x509 -in ${yourCert.pem} -noout -text >> ${yourCert.pem}

2.determine md5 hash which will become part of the file name:

openssl x509 -subject_hash_old -noout -in ${yourCert.pem}

3.rename & copy to proper location:
I also tried /opt/alien/data_jolla/misc/keychain/certs-added/ (would be cleaner to put it there), but K-9 Mail didn't used it from there

mv ${yourCert.pem} /opt/alien/system/etc/security/cacerts/${theMD5Value}.0

• Reboot, just to be sure

References: https://blog.kylemanna.com/android/android-ca-certificates/#installing-a-root-ca-certificate-on-android

I needed a way to import own TLS certificates so that Android apps trust them. This is different to adding certs to SfOS, the Android subsystem doesn't use the same cert store as Sailfish does.

pkcon install openssl

openssl x509 -in ${yourCert.pem} "${CERTFILE}" -noout -text >> ${yourCert.pem}
"${CERTFILE}"

openssl AnMD5Value=$(openssl x509 -subject_hash_old -noout -in ${yourCert.pem}
"${CERTFILE}")

devel-su mv ${yourCert.pem} /opt/alien/system/etc/security/cacerts/${theMD5Value}.0
"${CERTFILE}" /opt/alien/system/etc/security/cacerts/"${AnMD5Value}".0