> But did you install it as a new root certificate or as a client
certificate on the android device?

As far as I understand, I installed it as a new root certificate, but I'm
not sure. I went to "Settings -> Passwords & security -> Privacy ->
Encryption and Credentials -> Install a certificate -> CA certificate".
Then if I go to "Trusted Credentials" on the device, I can see the Charles
certificate in the "User" tab

> Can you access other https locations? If so then the other root ca:s
works on the device for some reason

Yeah, I can access HTTPS locations without the proxy. I think the system
certificates that are in the "/system/etc/security/cacerts" directory don't
have any problem because those are PEM format (I checked that by grabbing
one of those certificates and doing "openssl x509 -in <certificate> -inform
PEM -text -noout" on my computer).

The problem seems to be that when Android installs the new certificate, it
converts it to DER format for some reason, which libcurl can't handle. I
want to know if there's a way to handle this using libcurl. Maybe there's a
way to convert the certificate before libcurl tries to verify it?
-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html

Reply via email to