Announcement

Collapse
No announcement yet.

Android - "Network may be monitored by an unknown third party"

Collapse
This topic is closed.
X
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    Android - "Network may be monitored by an unknown third party"

    Android 4.4 complains constantly if you import a root certificate, like from CAcert. AFAIK, there's no way to turn off the warnings without manually editing your system certs. Notifications are not only in your quick settings panel, but your notification bar too.

    Editing the root certs isn't something I could have done without some linux knowledge (i.e., without you lot), so thanks for learning me so good !

    In terminal emulator, on a rooted phone with busybox:
    Code:
    u0_a79@deb:/ $ su
    root@deb:/ # mount -o remount,rw -t yaffs2 /dev/block/mtdblock3 /system
    root@deb:/ # cd /data/misc/keychain/cacerts-added/
    root@deb:/ # ls
    root@deb:/ # cat 5ed36f99.0 > /system/etc/security/cacerts/5ed36f99.0
    root@deb:/ # cat e5662767.0 > /system/etc/security/cacerts/e5662767.0
    root@deb:/ # cd /system/etc/security/cacerts
    root@deb:/ # ls -l
    root@deb:/ # chmod 644 5ed36f99.0 e5662767.0
    root@deb:/ # reboot
    Or, see here for an annotated version.

    Firefox is another matter. It's easier, and doesn't require root, but never quite trusts a cert you import (little exclamation triangle on every page, "you have added a security exception"). Just find the certs and open them in firefox. I wish you could make Firefox use the system certs, if anyone knows how then spill the beans please!

    Feathers
    samhobbs.co.uk

    #2
    Neat find. One bit about file systems, though. This line:
    Code:
    mount -o remount,rw -t yaffs2 /dev/block/mtdblock3 /system
    can be simplified to:
    Code:
    mount -o remount,rw /system
    A remount does not need to specify a node, because the mount command already knows where the node is. Furthermore, these nodes are device-specific. On my Nexus 4, for example, the system partition is /dev/block/mmcblk0p21.

    Comment


      #3
      Sweet, thanks! That makes things easier
      samhobbs.co.uk

      Comment

      Working...
      X