r/LineageOS • u/nfmon • 2d ago

Help How to trust certificate?

Hello there,

I've installed my own certificate issued with mkcert to access services on my local network over https. Everything works as expected but every know and then i get the notification about untrusted certificate. When i click on it a dialog shows. I can click ok or get rid of the certificate, there is no trust option. Is there a way to get rid of the notification?

6 Upvotes

100% Upvoted

1 comment sorted by

2

u/matega 1d ago

You can't get rid of the notification - that's for your security so no one can install an user certificate on your phone undetected and eavesdrop on all your traffic. You can't even make every app trust your user CA, the app developer specifically has to enable trust in user certificates.

Using root or directly modifying the system partition or the ROM install package you could be able to install your CA as a system CA. It should work (I tried to do this once and it didn't), but some app use their own custom CAs and/or certificate pinning so still not everything will trust it.

There's another way: get a domain (duckdns lets you register subdomains for free) and a certificate for it (letsencrypt is easy and free). Your certificate is now already trusted without any user CA.