Database Users

[Q] Custom SSL certificates

I would like to use my Xoom to do stuff for work. However, we use a custom self signed certificate to gain access to any of our webpages. Normally we install them manually in our browser on our PC's and I am trying to do the same thing on my tablet.
Is there either a browser for android that allows you to add your own SSL certificates ( I have tried just about everyone I can find, opera, firefox, dolphin, skyfire) but none give me that functionality.
Or
Do I need to install the certificate on the device. I have found an area in which I can install the certificate Settings>Location & Security> Credential Storage>install from USB storage. However when I try to access any of the pages, I do not believe that the browser is using the custom SSL I have installed.
Any ideas or tips? Thanks.

When you say self signed cert, do you mean you have your own CA that you are using in your enterprise? If so, you'll need to install the self signed cert on the device as well as the root CA's cert that you used to sign the cert.

nindoja said:
When you say self signed cert, do you mean you have your own CA that you are using in your enterprise? If so, you'll need to install the self signed cert on the device as well as the root CA's cert that you used to sign the cert.
Click to expand...
Click to collapse
This makes sense.

Thanks for the help.
I installed both the CA that was used to sign the certificate and the actual public key itself however still no avail.
I am still getting a generic error is just stating that it cannot establish a secure connection. The problem is I cannot guarantee that the browser is actually trying to use the cert or not. I would imagine I would be prompted for which to use or to confirm but never have received that.
Looking at the logging on the server I see no error messages. Our system is designed to ask for this SSL for identification and it seems as though the tablet is saying "crap....see ya".
I don't know if it is user error or lack functionality.
Excuse my ignorance.

[Q] Remove User Certificate on Nexus 4

Hi, i have Android 4.3 and a N4
I installed a User Certificate from Realms.Pocketmine.net , when i installed i put a name and put it on VPN and Apps. Then forced me to put a PIN, but know i want to remove it and clear the password. When i go to: Config>Security>Trusted Certificates, i cant find it, neither On System por User certificates, but i dont know if the "Remove all certificates " option, remover only user installed or ALL certificates.

aloarayacr said:
Hi, i have Android 4.3 and a N4
I installed a User Certificate from Realms.Pocketmine.net , when i installed i put a name and put it on VPN and Apps. Then forced me to put a PIN, but know i want to remove it and clear the password. When i go to: Config>Security>Trusted Certificates, i cant find it, neither On System por User certificates, but i dont know if the "Remove all certificates " option, remover only user installed or ALL certificates.
Click to expand...
Click to collapse
Wouldn't you remove it in the VPN configuration?

Question: Is it safe to log into gmail after rooting?

Hello!
So I recently rooted my Samsung Galaxy S5 (SM-G900i)
I flashed the kltedd .tar.md5 file through odin (downloaded the .tar.md5 file through Chainfire's CF Auto Root Website)
Everything worked, after going through the whole process my phone rebooted and everything seems normal.
All my data has been preserved and it all works fine.
The only problem is to check that my phone actually has root access I need to download one of those root-checker apps from the play store, but I need to sign into my Gmail account to get to the play store in the first place.
I just wanted to know if it is safe to log into my gmail account on a rooted device - is it possible in any way shape or form that I might have a sneaky keylogger or some spy-ware that could potentially see my Gmail password?
Any help would be appreciated
Sincerely, a noob to XDA Forums.

If you have rooted then there should be a SuperSU app or similar, and when you enter it it should tell you somewhere if root is working fine.
There's an easy way to check for root, which doesn't involve any app, but you need to be able to connect the phone to a PC and you will need USB drivers, and to get your hands on adb.exe (or android-tools-adb package on Linux). Assuming you've done that:
* Enable developer options. (Settings > About Phone, tap Build number 10 times, you will get a popup telling you that Settings > Developer options has appeared.)
* Enable "USB debugging mode".
* Connect via USB to the PC.
* Run `adb devices`.
* You will be asked if you want to accept the debug connection, and possible if you want to enable MTP, say "yes" to both.
* Run `adb shell`.
* Once inside the shell you can type "su[ENTER]". The terminal should freeze and you should get a popup from your SuperSU app asking if you want to grant root access to ADB. If you don't get a popup and "su" fails in the terminal, you don't have root. If you don't get a popup but you get a "#" prompt in the terminal, you have root, but you don't have a root controller app, which is not good (anybody can get root).
Another even simpler method would be to use a terminal app... provided you already have one installed. Most custom ROMs do, stock ROMs don't. Then you just use the same "su[ENTER]" stuff in the terminal.

also, you can bypass the whole thing of logging into your gmail acct and go directly into your phones main screen, go into menu, settings, about phone and tap on the build number until you see the message stating that you are now a developer, back up one step, go into developer options, check the box to allow the installation of third party apps and just download the root checker apk from elsewhere. Sounds compllicated, but its easier than CLI stuff for the uninitiated
---------- Post added at 08:45 AM ---------- Previous post was at 08:45 AM ----------
also also, ive never heard of anyone getting a keylogger after merely rooting their phones

It's technically possible if you get your "root app" from random websites. It's a golden opportunity for a hacker, you're practically begging them "please exploit my phone, I'm gonna help by running your app and bypassing all safety measures".

security should be fine as long as you dont lose your device or download apps from unsafe sites.
as for whether it is rooted or not, already answered above.
Good to see another aussie here.
I'm still a bit of a noob too but happy to help with any endevours regarding phone, especially model specific ones (I have G900I too).

wirespot said:
It's technically possible if you get your "root app" from random websites. It's a golden opportunity for a hacker, you're practically begging them "please exploit my phone, I'm gonna help by running your app and bypassing all safety measures".
Click to expand...
Click to collapse
really mate!?
i have my rooted S5 with my 3 gmail accounts logged in
and i didnt have any secuirty issue at all in past and now

question for Galaxy Express 3(not listed). Trying to bypass google verification

so my friend found a samsung galaxy express 3 from at & t and wanted me to set it up for him. so he gave it to me, first thing i did was factory reset it in recovery mode. Then problems started. I dont have the previous owners account so i need to bypass the google verification. But i have no idea how. ive tried the side sync method, the open with option never showed up. this phone doesn't have usb hosting so i cant use an otg cable. i tried the real term method, just an error when i put the codes. i tried the no computer methods, i can get into ultra power saving mode, but thats it. with the other no computer methods it comes down to restarting it, and when it comes back on theirs camera access but for me when i restart it its locked, but no camera or phone access. ive tried every option i could find and even tried installing a stock ROM, succeeded with the stock rom installation thinking it would remove the google verification but still didn't. does anybody have any ideas? i cant enable USB debugging. so i dont think i can root it and install a custom rom and disable it. at least i think. im new to this stuff so if anybody has suggestions for me then that would be great. Thank you in advance

Google frp bypass. Methods have changed, due to patching. You need to research the most current method. I used Rootjunky's method back in the fall of 2016. Worked like a charm. Consisted of a phony call through an emulator, triggered a request for contact storage, led to browser opening playstore for a vcard app. Download frp bypass app instead, viola!! Imho, too much work for that phone.

I managed to get into chrome. Now what?
So with a bunch of messing around I managed to get into chrome through the emergency call but I'm in chrome. Which is how most methods work is through chrome. U install an app then run it and ur able to bypass it pretty much. But I can't install any apks. When I download a file it ask if I wanna download it, then starts it but never prompts me when it's done so I can't open it and install it. If I redowbload the same file it lets me look at the downloaded files and I can even get to the SD card. But if I tap on anything that's not a folder it kicks me back to the browser. So how could I get on the Samsung store to get es file explorer or install apks? Any help would be great thanks

I've had success setting up a samsung account installing es file explorer, then putting the app needed on sd card or Bluetooth it via a settings app. Rootjunky has the apks. But yes the 911 loophole is there if you don't have a sim to do a realterm dialer method

[SOLVED] Need help to remove/uninstall Malware app.. Any suggestion..

[SOLVED] It was installed in the Secure Folder.. that's why I couldn't find it. I managed to install Avast, and then install it on the Secure Folder. Following that I ran Avast scan inside the secure folder and it found the apk and removed it. Pesky app..
Recently downloaded an apk that locked my phone.. I noted that it had the Draw over other apps permissions but didn't think it could cause this..
Anyway, this app fills the whole screen and can not remove it. I was able to turn off the phone by long pressing the power and volume buttons and when restarting I discovered that I was able to use the phone for a couple minutes before the malware appeared again.
During this time I was able to power off phone and get to Safe Mode. I disabled all the apps which had the overlay permission and also apps that affect system configuration.
But I am currently not being able to find it and uninstall it. Although doing the above steps the malware still appears and locks my screen when I enter normal mode.
**Is there a way to find the latest app installed and remove it without root? Otherwise, would it be possible to remove it via ADB? I've never used it but I believe it could be useful this time.. the only thing is I am not sure what's the .apk name..
I'm using a Galaxy S8 international version without root
Thanks in advance for your help!!!!

SOLVED IT.
Name: VideoChat.apk
It was installed in the Secure Folder.. that's why I couldn't find it. I managed to install Avast, and then install it on the Secure Folder. Following that I ran Avast scan inside the secure folder and it found the apk and removed it. Pesky app..

If i were you, i would factory reset, even if you did successfully remove that app.