[Q] Custom SSL certificates - Xoom General

I would like to use my Xoom to do stuff for work. However, we use a custom self signed certificate to gain access to any of our webpages. Normally we install them manually in our browser on our PC's and I am trying to do the same thing on my tablet.
Is there either a browser for android that allows you to add your own SSL certificates ( I have tried just about everyone I can find, opera, firefox, dolphin, skyfire) but none give me that functionality.
Or
Do I need to install the certificate on the device. I have found an area in which I can install the certificate Settings>Location & Security> Credential Storage>install from USB storage. However when I try to access any of the pages, I do not believe that the browser is using the custom SSL I have installed.
Any ideas or tips? Thanks.

When you say self signed cert, do you mean you have your own CA that you are using in your enterprise? If so, you'll need to install the self signed cert on the device as well as the root CA's cert that you used to sign the cert.

nindoja said:
When you say self signed cert, do you mean you have your own CA that you are using in your enterprise? If so, you'll need to install the self signed cert on the device as well as the root CA's cert that you used to sign the cert.
Click to expand...
Click to collapse
This makes sense.

Thanks for the help.
I installed both the CA that was used to sign the certificate and the actual public key itself however still no avail.
I am still getting a generic error is just stating that it cannot establish a secure connection. The problem is I cannot guarantee that the browser is actually trying to use the cert or not. I would imagine I would be prompted for which to use or to confirm but never have received that.
Looking at the logging on the server I see no error messages. Our system is designed to ask for this SSL for identification and it seems as though the tablet is saying "crap....see ya".
I don't know if it is user error or lack functionality.
Excuse my ignorance.

Related

Forgot win8 admin pass

Heys guys how can i reset my password on win8 and im the admin uaer please help me
Thanks in advance
Sent from my GT-N7000 using xda app-developers app
Is it a local machine account or a microsoft account?
If its local machine. No idea.
If its microsoft. Try logging into any microsoft service in browser and click "forgot my password"
There's, like, 6 different ways to do it, depending on what you've done with the system.
Zeroeth question (already been asked): local account or Microsoft account?
First question: is this your personal account, or the system Administrator account?
Second question: do you have any other admin accounts?
Third question: have you put a password on the actual system Adminstrator account (and/or do you remember it)?
One simple way is to use Safe Mode - a little harder to get to than before, but still possible - and reset the password using the built-in Admin account.
GoodDayToDie said:
There's, like, 6 different ways to do it, depending on what you've done with the system.
Zeroeth question (already been asked): local account or Microsoft account?
First question: is this your personal account, or the system Administrator account?
Second question: do you have any other admin accounts?
Third question: have you put a password on the actual system Adminstrator account (and/or do you remember it)?
One simple way is to use Safe Mode - a little harder to get to than before, but still possible - and reset the password using the built-in Admin account.
Click to expand...
Click to collapse
Local account
And yes i have admin account
The problem is i changed my pass at the same day locked the user to try it but it didnt work
Sent from my GT-N7000 using xda app-developers app
Look up the instructions for booting Win8 into Safe Mode, log in using the local Admin account, and use the "Local Users and Groups" management console to reset the password.
Alternatively, use the recovery tools (present either on the Windows install disk or possibly in the recovery partition) to launch a "recovery console" command prompt. It requires that you are able to log into at least one account on the machine, though; the local Admin may or may not work. If it does, you'll get a command prompt; follow the instructions here: http://www.ehow.com/how_8089008_reset-windows-password-cmd.html
Assuming you haven't set up BitLocker, you could also boot off a Linux Live-CD/Flashdrive image, and use that to access and modify the Windows partition.
I'm not going to get too detailed on this but there is a very useful program I've been using for years, so long as its not a domain account it will work, please note, if you use EFS and change the password on that locked account you will screw it all up, the key is made from your password , gaining access to an account without the password will not give you access to EFS so don't piss about with the password or consider it all gone!
Kon-boot
Google it
Pay for it
Learn it
Use it with extreme caution, best way is to make a new admin user then log in to that to make system changes, EFS will still get screwed tho if you change that users password!!
Sent from my Arc using xda app-developers app

root and exchange aes question

If I root my phone and install a new Google edition rom, but still use the same Samsung email app, will it still authenticate using the same device id and Device user agent

[Q] Remove User Certificate on Nexus 4

Hi, i have Android 4.3 and a N4
I installed a User Certificate from Realms.Pocketmine.net , when i installed i put a name and put it on VPN and Apps. Then forced me to put a PIN, but know i want to remove it and clear the password. When i go to: Config>Security>Trusted Certificates, i cant find it, neither On System por User certificates, but i dont know if the "Remove all certificates " option, remover only user installed or ALL certificates.
aloarayacr said:
Hi, i have Android 4.3 and a N4
I installed a User Certificate from Realms.Pocketmine.net , when i installed i put a name and put it on VPN and Apps. Then forced me to put a PIN, but know i want to remove it and clear the password. When i go to: Config>Security>Trusted Certificates, i cant find it, neither On System por User certificates, but i dont know if the "Remove all certificates " option, remover only user installed or ALL certificates.
Click to expand...
Click to collapse
Wouldn't you remove it in the VPN configuration?

[Q] How to uninstall wireless certificate?

Hello there guys.
My work's wireless network requires the installation of a certificate to be accessed, which is a .p12 file. I have such a file and the key to access that were used on my notebook, so I tried installing it on my phone to see if it could access the network.
Turns out it still requires some access info I'm unsure about, so I gave up on the idea. Thing is after installing this certificate the phone required me to draw a pattern or a set a code to access the phone, and tbh I was keen on having no security at all.
Now I can't enable lower level security unblocks on my phone, and I can't find where I could uninstall this certificate to remove this lock.
Does anyone know where I can uninstall it, or where I can find the file inside my phone? It's not on the root of the phone anymore.
I have an unrooted GT I9505 (and plan to keep it that way). Thanks!!! :angel:
Hi admins, pls delete this post. I just found out how to do it
Had to go through security and then clear credentials.
Sorry for bothering.

Update 5.0.5.1 - README

URL for updates appears to have changed. Now it's HTTPS and the OTA is now being pulled from https://amzdigital-a.akamaihd.net. Unfortunately I don't have SSL sniffing enabled so I can't give you the links.
Installed the update, rooting fails with KingRoot 4.1. Reset to factory defaults, installed Kingroot 4.1, rooting failed :crying:
Old method of flashing the recovery first from rbox still works. For now you need to downgrade to pre-rooted 5.0.5.0, until rbox releases a pre-rooted 5.0.5.1:
Rooting is still possible:
- Download install_firetv2_recovery_v3.zip
- Download firetv2_recovery_v5.zip
- Extract both to same folder
- Run install_firetv2_recovery.bat
- Plug in power to AFTV2 and let it flash the recovery.
- When it's done copy ramdisk-recovery.cpio.lzma and sloane-5.0.5-rooted_r4.zip firmware to a NON corrupt usb or sdcard
- Reboot, choose recovery with a keyboard
- Install the 5.0.5.0 firmware
- Boot and bingo :good:
1st Gen?
Sent from my SM-N900V using Tapatalk
roligov said:
Some how got both URLs for the full firmware version and the OTA.
Download link:
Code:
http://amzdigitaldownloads.edgesuite.net/obfuscated-otav3-6/8921f843c5dc154a747edb468b3b773f/update-sloane_full_sloane-536116920-to-537174420.bin
Code:
http://amzdigitaldownloads.edgesuite.net/obfuscated-otav3-7/471d77e1c3ad23df4a469c8b88a0c200/update-kindle-full_sloane-36.5.3.7_user_537174420.bin
Will attempt root after it installs...
Click to expand...
Click to collapse
Do you have more then one version of a FTV device... aka Fire TV (1st Gen), Fire TV Stick, Fire TV (2nd Gen) ?
I do have multiple AFTV1s and AFTV2s, but only 1 is configured to go through my PC as a proxy. The full firmware is the one my AFTV2 is downloading. Will update in a few minutes....
roligov said:
Sorry ignore this. This thread can be trashed, this is an AFTV2 that was sitting in the cupboard not on 5.0.5.0. Still odd the full update came through? Thought all firmware updates were OTA's, Sorry guys!
Click to expand...
Click to collapse
By chance, did that AFTV2 have FireStarter installed prior to updating to 5.0.5 just now? If so, can you check to see if FireStarter is still listed in your Settings > Applications list?
I saw some strange behavior on one of my boxes that makes me think the new issues envolving FireStarter are not limited to the 5.0.5.1 update.
Sorry developing news: 1 firetv2 was on an old firmware, so it got the 5.0.5.0 update and nothing further.
Another FireTV2 of mine had the 5.0.5.1 update on the box and was ready to install it. I had to remove the update from /mnt/shell/emulated/0/Android/data/com.amazon.device.software.ota/files/update-kindle-full_sloane-36.5.3.7_user_537175520.bin
I will sniff the link again quick.
Bad news, the URL for updates has changed to HTTPS. The firmware is now being pulled from https://amzdigital-a.akamaihd.net. Unfortunately I don't have SSL sniffing enabled so I can't give you the links.
Elias: New article for you: Be aware if you haven't disabled the updates via package manager and are blocking via your router, your device will get the OTA as that site is not 1 of the 3 we currently block.
Rooting appears to be blocked on 5.0.5.1, at least with KingRoot 4.1
Tried Kingroot v4.8.5, still failed. It's official. Amazon have decided to be c*nts. Rooting is blocked in 5.0.5.1. Sound the alarm bells, run for the hills! DO NOT UPDATE if you enjoying root!
I can also confirm that Firestarter is broken and will not work after a reboot, this is the error you will get:
http://i.imgur.com/WD0dZTU.png
Image of rooting failed with KingRoot: http://i.imgur.com/2G9zHb5.png
roligov said:
Bad news, the URL for updates has changed to HTTPS. The firmware is now being pulled from https://amzdigital-a.akamaihd.net. Unfortunately I don't have SSL sniffing enabled so I can't give you the links.
Elias: New article for you: Be aware if you haven't disabled the updates via package manager and are blocking via your router, your device will get the OTA as that site is not 1 of the 3 we currently block.
Click to expand...
Click to collapse
sorry for asking but which packages do you've blocked to prevent the box updating?
I've already disabled two services with adb but now I'm not sure if I'm safe or not.
Go to http://www.aftvnews.com/block and follow method 1, that's probably your safest bet. Second just add the new URL above to method 3, even though it's https, the URL can still be blocked because only the traffic is encrypted not the URL.
Last image before I go to bed. Proof I have the 5.0.5.1 update: http://i.imgur.com/VVmdG7U.png
Just because they're using HTTPS doesn't mean blocking via DNS or router methods won't work, it just means you can't easily sniff out the full URL of the update. Something like Charles Proxy would allow you to decrypt SSL during the proxy, this assumes that the client (Fire TV) is either not validating certs or you can install the cert you're using in Charles on the device itself.
bubbanc said:
Just because they're using HTTPS doesn't mean blocking via DNS or router methods won't work, it just means you can't easily sniff out the full URL of the update. Something like Charles Proxy would allow you to decrypt SSL during the proxy, this assumes that the client (Fire TV) is either not validating certs or you can install the cert you're using in Charles on the device itself.
Click to expand...
Click to collapse
You can block via DNS, but you can't block via URL. To block via URL a router has to do packet inspection to inspect the HTTP request, and when using HTTPS, it's encrypted so the router can't do that. The FireTV does validate certificates, and you need root to be able to add one.
bubbanc said:
Just because they're using HTTPS doesn't mean blocking via DNS or router methods won't work, it just means you can't easily sniff out the full URL of the update. Something like Charles Proxy would allow you to decrypt SSL during the proxy, this assumes that the client (Fire TV) is either not validating certs or you can install the cert you're using in Charles on the device itself.
Click to expand...
Click to collapse
Correct. But it probably depends on your router, but my router is a Mikrotik and it can block at layer 7 (application layer in OSI). Because the URL request is in plain text, it can still block it. I've tested and confirms it works on the Mikrotik. The issue is that this is a new url that we have not been blocking, meaning those who are only blocking via router or dns will still get this update.
is this the way to block it? or need to put https in front of it?? thanx
So on an unrooted device this update deletes Firestarter but moves all apps to the recent section, so no big loss here. One major problem I'm having though is that DTS and Dolby Digital Audio is not working at all in Kodi (16.0)
htchd2fix said:
is this the way to block it? or need to put https in front of it?? thanx
Click to expand...
Click to collapse
http://forum.xda-developers.com/fire-tv/general/block-ota-updates-root-fire-os-5-t3183134
Bramton1 said:
http://forum.xda-developers.com/fire-tv/general/block-ota-updates-root-fire-os-5-t3183134
Click to expand...
Click to collapse
Does this method work with https?

Categories

Resources