ys1231 / movecertificate Goto Github PK

• Device: Pixel 8 Pro
• OS version: 14
• env: magisk
• installed module: [ Zygisk - LSPosed V1.9.2, Shamiko v1.0.1, MoveCertificate v1.4.11 ]

安装证书一切正常，但重启后证书仍然保留在用户证书库。

/data/adb/modules/MoveCertificate/certificates
/apex/com.android.conscrypt/cacerts
/apex/com.android.conscrypt@(\d{9})/cacerts

以上三个目录中均能找到安装的证书。

实际抓 HTTPS 包也会提示证书不被信任。

log

[iyue_MoveCertificate] Keep only one up-to-date log
[iyue_MoveCertificate] start move cert !
[iyue_MoveCertificate] current sdk version is 34
[iyue_MoveCertificate] Backup system certificates
[iyue_MoveCertificate] Backup user custom certificates
[iyue_MoveCertificate] Backup user custom certificates
[iyue_MoveCertificate] Backup user custom certificates status:0
[iyue_MoveCertificate] fix user permissions: /data/misc/user/0/cacerts-added/
[iyue_MoveCertificate] fix user permissions status:0
[iyue_MoveCertificate] fix permissions: /data/adb/modules/MoveCertificate/certificates
[iyue_MoveCertificate] fix permissions: 0
[iyue_MoveCertificate] find system conscrypt directory
[iyue_MoveCertificate] find conscrypt directory: /apex/com.android.conscrypt@341911010
[iyue_MoveCertificate] certificates installed

• Device: Xiaomi 13

• OS version: MIUI EU 14.0.31.0.TMCCNXM

• env: kernelsu 11413

• install version: 1.4.11

• installed module:

  • Zygisk - LSPosed V1.9.2(7024)
  • Shamiko v1.0.1 (300)
  • Zygisk Next v1.0.3(287-bd5b40a-release)

ESUN Bank APP / line pay will detect device root status after I enabled MoveCertificate.
Is there any way to hide root when I enable the module?

感谢大佬提供模块
设备 pixel2 android11 ，masgisk 26100
步骤：
1.httpcanary 导出证书后，安装证书 (用户证书)
2.重启
3.安装MoveCertificate模块
4.重启
查看/system/etc/security/cacerts
-????????? ? ? ? ? ? 87bc3517.0

求教如何解决，感谢~

https://github.com/wanghongenpin/network_proxy_flutter

• Device: 一加10 pro
• OS version: 14
• env: magisk

出现的问题：证书push到设备之后，重启手机，证书确实被安装了，但不是安装到了系统证书下，还是用户证书。然后导致抓包HTTPS还是有问题。主要mitmproxy官方的magic模块压根没效果，用大佬你这个模块有效果，但是没安装到系统证书下。

install.log的日志：

[iyue_MoveCertificate] Keep only one up-to-date log
[iyue_MoveCertificate] start move cert !
[iyue_MoveCertificate] current sdk version is 34
[iyue_MoveCertificate] Backup system certificates
[iyue_MoveCertificate] Backup system certificates
[iyue_MoveCertificate] Backup user custom certificates
[iyue_MoveCertificate] fix permissions: /data/misc/user/0/cacerts-added/
[iyue_MoveCertificate] fix permissions status:0
[iyue_MoveCertificate] find system conscrypt directory
[iyue_MoveCertificate] find conscrypt directory: /apex/com.android.conscrypt@340090000
[iyue_MoveCertificate] mount: /apex/com.android.conscrypt@340090000/cacerts/
[iyue_MoveCertificate] mount status:0
[iyue_MoveCertificate] move cert: /apex/com.android.conscrypt@340090000/cacerts/
[iyue_MoveCertificate] fix permissions: /apex/com.android.conscrypt@340090000/cacerts/
[iyue_MoveCertificate] move cert status:0
[iyue_MoveCertificate] certificates installed

install14.log的日志:

[iyue_MoveCertificate] Keep only one up-to-date log
[iyue_MoveCertificate] mount: /apex/com.android.conscrypt/cacerts/
[iyue_MoveCertificate] mount status:0
[iyue_MoveCertificate] move cert: /apex/com.android.conscrypt/cacerts/
[iyue_MoveCertificate] fix permissions: /apex/com.android.conscrypt/cacerts/
[iyue_MoveCertificate] move cert status:0

• Device: Xiaomi12Pro
• OS version: Hyperos1.0.2
• env: apatch

无日志.
安装后,手机重启进不了系统,应该是触发了apatch了保护,然后自动二次重启,进入系统查看证书,证书安装在用户证书中,未在系统证书.

大佬，请问kernelSU可以用这个模块吗？

安卓14 2024-02-01安全补丁，安装模块后，用户证书消失，打开系统证书界面会重启，重启后用户证书和系统证书均没有

可以选择不安装用户证书吗，毕竟可以成功安装系统根证书的话，在安装用户证书是不是有点多此一举。
因为MIUI会在每次开机的时候弹出“网络可能受到监控”吧啦吧啦的，有点烦这个提示。

The certificate has been installed in the system directory. It can be used by other apps. Only the Google browser cannot. After checking, it is because /system/etc/security/cacerts_google exists in the system. Have you considered adding this directory?

使用说明里的"导出证书后直接push到手机"，push到哪个目录里呢？

查看系统凭据，均已移动过去了，用户凭据也存在，抓包证书仍然显示不信任
环境：ksu
内核：4.19.259

现象：/data/adb/modules/MoveCertificate 下已有用户证书，/apex/com.android.conscrypt/cacerts 目录下也存在对应证书，但/apex目录下同时存在com.android.conscrypt@3400900000，/apex/com.android.conscrypt@3400900000/cacerts目录下不存在对应用户证书，设置的证书界面下页没有对应用户证书。请帮忙分析下~！

• Device: Samsung S9+
• OS version: 14
• env: kernelsu

1.4.4 all good

• Device: Meizu 21
• OS version: 14
• env: magisk alpha 27001

Additional context
启用1.4.6版本之后，无法开机，卡在Flyme气球页面，没有install.log。

• Device: [ Pixel5 ]
• OS version: [ 14 ]
• env: [ magisk ]

Additional context
Add any other context about the problem here.
Extract unzip error, Upload Module Execution Log

• Device: [Pixel5]
• OS version: [ 14 ]
• env: [ magisk ]

Additional context

• Device: oneplus ace 3v ColorOS 14
• OS version: 14
• env: [magisk27]

目前安装看起来一切正常，但是抓包还是证书异常。
然后我在/apex/com.android.conscrypt@340090000的certs目录下面没有找到我预留的证书。大佬有没有思路，或者我该怎么继续排查，谢谢。

Additional context
[iyue_MoveCertificate] Keep only one up-to-date log
[iyue_MoveCertificate] start move cert !
[iyue_MoveCertificate] current sdk version is 34
[iyue_MoveCertificate] Backup system certificates
[iyue_MoveCertificate] Backup user custom certificates
[iyue_MoveCertificate] Backup user custom certificates
[iyue_MoveCertificate] Backup user custom certificates status:1
[iyue_MoveCertificate] fix user permissions: /data/misc/user/0/cacerts-added/
[iyue_MoveCertificate] fix user permissions status:1
[iyue_MoveCertificate] fix permissions: /data/adb/modules/MoveCertificate/certificates
[iyue_MoveCertificate] fix permissions: 0
[iyue_MoveCertificate] find system conscrypt directory
[iyue_MoveCertificate] find conscrypt directory: /apex/com.android.conscrypt@340090000
[iyue_MoveCertificate] certificates installed

无法导出日志，因为“adbd cannot run as root in production builds”，抱歉了

Can you please do something that add my certificate into /system/etc/security/cacerts/ directory too. Currently it's only moving certificate to /apex/com.android.conscrypt/cacerts/

I want it to move that my custom certificates to /system/etc/security/cacerts/ this directory too. thank you

安装完之后出现问题不是系统证书，而是用户证书

Your module is not working when i use Zygisk-Assistant module. I don't know what problem it has. Please take a look into it.

• Device: [ ONEPLUS Ace 3 ]
• OS version: [ 14, PJE110_14.0.0.810(CN01) ]
• env: [ magisk 27.0(27000) ]
• installed module: [ Zygisk - LSPosed V1.9.2 ]

Additional context
I followed “手动安装证书到系统证书目录”
The certificate is still in user's direcotry after reboot.

/data/adb/modules/MoveCertificate/install.log is shown below:

[iyue_MoveCertificate] Keep only one up-to-date log
[iyue_MoveCertificate] start move cert !
[iyue_MoveCertificate] current sdk version is 34
[iyue_MoveCertificate] Backup system certificates
[iyue_MoveCertificate] Backup user custom certificates
[iyue_MoveCertificate] Backup user custom certificates
[iyue_MoveCertificate] Backup user custom certificates status:0
[iyue_MoveCertificate] fix user permissions: /data/misc/user/0/cacerts-added/
[iyue_MoveCertificate] fix user permissions status:0
[iyue_MoveCertificate] fix permissions: /data/adb/modules/MoveCertificate/certificates
[iyue_MoveCertificate] fix permissions: 0
[iyue_MoveCertificate] find system conscrypt directory
[iyue_MoveCertificate] find conscrypt directory: /apex/com.android.conscrypt@340090000
[iyue_MoveCertificate] certificates installed

miui13系统（安卓12）安装fiddler的cer证书，magisk安装此插件后，重启后浏览器弹框提示“安全警告，该网站的安全证书有问题”，查看证书提示，证书并非来自可信的授权中心，大佬是否可以看下此问题原因，感谢！

你好开发者，我是android9，已经把burp证书倒入到系统证书里了，但抓https还是会存在提示证书不可信