mifr/subsurface
1
0
Fork 0
mirror of https://github.com/subsurface/subsurface.git synced 2024-12-11 19:41:30 +00:00
Code Issues Projects Releases Packages Wiki Activity

Android: allow user installed root certificates

Browse source 
On Android devices that no longer get updates to the system installed
SSL root certificates, the user can easily install the updated Let's
Encrypt root certificate, but that is only used by Subsurface-mobile if
we explicitly allow the use of those user installed root certificates.

Fixes #3335

Suggested-by: Greg Hunter
Signed-off-by: Dirk Hohndel <dirk@hohndel.org>
This commit is contained in:
Dirk Hohndel 2021-10-13 23:15:58 +00:00
parent b618d93241
commit afdfccd274
2 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
android-mobile/AndroidManifest.xml
View file

@ -10,7 +10,8 @@
android:hardwareAccelerated="true" android:hardwareAccelerated="true"
android:label="@string/app_name" android:label="@string/app_name"
android:extractNativeLibs="true" android:extractNativeLibs="true"
android:icon="@drawable/subsurface_mobile_icon" > android:icon="@drawable/subsurface_mobile_icon"
android:networkSecurityConfig="@xml/network_security_config" >
<activity <activity
android:name="org.subsurfacedivelog.mobile.SubsurfaceMobileActivity" android:name="org.subsurfacedivelog.mobile.SubsurfaceMobileActivity"
android:configChanges="orientation|uiMode|screenLayout|screenSize|smallestScreenSize|layoutDirection|locale|fontScale|keyboard|keyboardHidden|navigation|mcc|mnc|density" android:configChanges="orientation|uiMode|screenLayout|screenSize|smallestScreenSize|layoutDirection|locale|fontScale|keyboard|keyboardHidden|navigation|mcc|mnc|density"

9
android-mobile/res/xml/network_security_config.xml Normal file
View file

@ -0,0 +1,9 @@
<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
<base-config cleartextTrafficPermitted="true">
<trust-anchors>
<certificates src="system" />
<certificates src="user" />
</trust-anchors>
</base-config>
</network-security-config>