custom certificate authorities

This Magisk module provides a specialized way to incorporate custom certificate authorities directly into the Android system trust store. It pulls these authorities from a dedicated location on the device file system, offering an efficient method for enhancing trusted connections across apps and services without depending on user store installations.

Functions and Uses

The module delivers essential capabilities for secure certificate handling, enabling users to manage custom CAs that support advanced networking needs such as enterprise integrations, development testing, or bypassing default restrictions. It stands out by maintaining system level trust without extra storage overhead, making it ideal for rooted devices where reliable authority recognition improves overall security and compatibility in various applications.

How the Module Works

Operation begins with placing prepared certificate files into the specified directory on the Android file system. Each file requires proper PEM encoding along with appended fingerprint information and a rename based on the subject hash for correct identification. Once arranged, the module copies these files to the system trust store during the boot process, ensuring seamless recognition by the operating system after a restart. This approach allows straightforward addition or removal of authorities through simple file management in the designated folder, with changes taking effect reliably upon reboot for consistent system wide application. For further information, see the repository at https://github.com/Magisk-Modules-Alt-Repo/custom-certificate-authorities. It also references related projects such as https://github.com/NVISOsecurity/MagiskTrustUserCerts and https://github.com/Magisk-Modules-Repo/movecert for comparison.

Download Link

Module Info