Installation of certificate in Android: הבדלים בין גרסאות בדף

מתוך ויקי נטפרי
קפיצה לניווט קפיצה לחיפוש
מ (fix: use {{he}} for link to hebrew page instead of {{en}} (דרך WP:JWB))
 
(15 גרסאות ביניים של 2 משתמשים אינן מוצגות)
שורה 1: שורה 1:
{{En|התקנת תעודה באנדרואיד}}  
+
{{he|התקנת תעודה באנדרואיד}}  
 
{{Navigation|Security certificate}}
 
{{Navigation|Security certificate}}
 
'''''Please note, [[WiFree Software]] which blocks the network when not connected to a VPN is not supported On the Android operating system.'''
 
<small>(on the [https://netfree.link/user#/tools/feature-request?r=5 Voting page] You can vote for such software development for Android).</small>
 
  
 
'''Please note! NetFree does not officially support Android devices, for help and advice you can try our forum.<br />'''
 
'''Please note! NetFree does not officially support Android devices, for help and advice you can try our forum.<br />'''
 +
There is an experimental version of [[WiFree Software]] for Android devices, see separate entry [[WiFree for Android]].
  
 
=== [https://www.youtube.com/watch?v=fDUIxSJZT78 Watch the detailed tutorial video] ===
 
=== [https://www.youtube.com/watch?v=fDUIxSJZT78 Watch the detailed tutorial video] ===
  
  
=== Installation of certificate in old Android versions ===
+
===Installation of certificate===
  
 
There are several options to install the security certificate:
 
There are several options to install the security certificate:
  
  
1. In the browser (when connected to NetFree) go to this link http://netfree.link/netfree-ca.crt<br />
+
1. In the browser (when connected to NetFree) go to this link [//netfree.link/netfree-ca.crt http://netfree.link/netfree-ca.crt]<br />
  
 
After entering the link, the Certificate Installation window pops up, follow the instructions below in option 2, Step 5.<br />
 
After entering the link, the Certificate Installation window pops up, follow the instructions below in option 2, Step 5.<br />
  
  
2. If "Can not install because the certificate file was not found" or "Can not find app to open application"
+
2. If "Can not install because the certificate file was not found" or "Can not find app to open application":
  
# Download the certificate (when connected to NetFree) from here http://netfree.link/netfree-ca.crt via the device's browser, or download the file to a computer <ref>'''Make sure that the computer is connected to the same NetFree ISP to which you want to connect the device.'''</ref> and copy to the device (in case there is no browser app on the device).
+
# Download the certificate (when connected to NetFree) from here [//netfree.link/netfree-ca.crt http://netfree.link/netfree-ca.crt] via the device's browser, or download the file to a computer <ref>'''Make sure that the computer is connected to the same NetFree ISP to which you want to connect the device.'''</ref> and copy to the device (in case there is no browser app on the device).
 
# Open the Settings app [[קובץ:אייקון אפליקציית הגדרות.png|אייקון אפליקציית הגדרות|17px]] on your device.
 
# Open the Settings app [[קובץ:אייקון אפליקציית הגדרות.png|אייקון אפליקציית הגדרות|17px]] on your device.
# In the Settings menu click on "Security & location" > "Credential storage"> "Install from storage/Install from sd card" (please note! The exact settings name varies from device to device, so you can use the search box)
+
# In the Settings menu click on '''Security & location''' > '''Credential storage / Advanced''' > '''Encryption and login information''' > '''Install from storage/Install from sd card''' (please note! The exact settings name varies from device to device, so you can use the search box)
 
# Go to the folder where the downloaded certificate is located from Step 1 > Click on the downloaded file (default certificate name is netfree-ca.crt).
 
# Go to the folder where the downloaded certificate is located from Step 1 > Click on the downloaded file (default certificate name is netfree-ca.crt).
 
# In the panel that opens, give a name to confirm (any possible name) and choose the option VPN and apps
 
# In the panel that opens, give a name to confirm (any possible name) and choose the option VPN and apps
 
# Click on "OK".
 
# Click on "OK".
# If you have not already set up an access code, pattern, or password on your device, you'll be prompted to do so.
+
# If you have not already set up an access code, pattern, or password on your device, you'll be prompted to do so<ref>There are devices such as those that exist in vehicles where it is not possible to delete the password from the regular settings menu.
 +
 
 +
To solve this problem, you can use a dedicated application to get the password deleted, Can be downloaded from [https://netfree.link/upload-file/246f152ecd32de28e85fee2917237b47003bbd44 here].</ref>.
 
# Repeat these steps and in step 5 select Wi-Fi.
 
# Repeat these steps and in step 5 select Wi-Fi.
  
=== For Android 7.0 and higher===
+
Mote! On Android 11, the only option to install the security certificate is only through the settings app: '''settings > security > Encryption and login details > Installation certificate > CA approval'''<ref>https://httptoolkit.tech/blog/android-11-trust-ca-certificates/</ref>.
  
By default, apps do not work with CA certificates added by the user.[https://support.google.com/pixelphone/answer/2844832 (Source)] [https://blog.jeroenhd.nl/article/android-7-nougat-and-certificate-authorities Detailed], So there may be apps that will not work even after installing the certificate as above.
+
On Samsung devices:> Biometric identification and security> Other security settings> Install from device storage
  
Solution: Install security certificate with [https://en.wikipedia.org/wiki/Rooting_(Android) Root authorization] [http://www.hamichlol.org.il/%D7%A8%D7%95%D7%98_(%D7%90%D7%A0%D7%93%D7%A8%D7%95%D7%90%D7%99%D7%93) Root authorization] In the "System" section system/etc/security/cacerts/.
+
=== For Android 7.0 and higher===
[http://forum.netfree.link/post/34978 expansion], You can download a certificate with an extension of 0. compatible with Android [[Security certificate for download as per provider| From here]].
 
 
 
You can also use the Root Certificate Manager app to install the certificate, [https://netfree.link/upload-file/53d5ebb93687bd75d75f7c0d2ff8834c0f95b974 You can download it from here].
 
 
 
There is currently no solution to the above without root permissions.
 
 
 
There are advanced ways to execute the above via - TWRP - Recoverers without root. You can read the tutorial [[Installation of certificate in Android using TWRP| here]], (Caution: Attempting to install the certificate in this way without technical knowledge can cause serious malfunctions).
 
 
 
=== Problems and solutions===
 
 
 
In different versions of Android sometimes at the point of installing the security certificate, a message pops up asking for "Enter the password for credential storage".
 
 
 
Try entering the device PIN code. If the PIN code is not accepted or the PIN code has not been set, follow these steps:
 
  
Go to > Security & location (or Security) > "Clear credentials".
+
By default, apps do not rely on certificates added by the user. Instead they rely only the pre-included system certificates, so most apps that will not work even after installing the certificate as above. <ref>https://httptoolkit.tech/docs/guides/android/</ref>
  
Then go to Settings > Screen Lock (sometimes, lock screen settings appear on different devices in other places, If they are not in the general settings, try searching under Security or Display). Set a pattern lock (It may appear as line). When setting up the pattern, you will be asked to set a PIN code for recovery, set a PIN code it is important to remember it.
+
Solution:
 +
==== If you have Root authorization, [https://en.wikipedia.org/wiki/Rooting_(Android) see here] or [http://www.hamichlol.org.il/%D7%A8%D7%95%D7%98_(%D7%90%D7%A0%D7%93%D7%A8%D7%95%D7%90%D7%99%D7%93) here]====
 +
Copy the certificate (In Android-optimized format - [[Security certificate for download as per provider|download from here]]) to the system certificate folder path <code>system/etc/security/cacerts/</code> thus causing the certificate to be a system certificate. This can be done easily using the appRoot Certificate Manager, [https://netfree.link/upload-file/53d5ebb93687bd75d75f7c0d2ff8834c0f95b974 download from here].
  
Restart the device.
+
General instructions for rooting for those with appropriate technical knowledge appear [https://telegra.ph/How-To-Root-AndroidTipsIL-10-10#%D7%90%D7%99%D7%A0%D7%93%D7%A7%D7%A1-%D7%A8%D7%90%D7%A9%D7%99 here] - External link.
  
When the device has finished restarting, you will be asked to insert the pattern to open the device, enter a wrong pattern 5 times and then enter using the recovery PIN you set up in Step 2 (click "Forgot pattern").
+
==== If TWRP Recovery is installed: ====
 +
You can copy the certificate to a system certificate folder without rooting. You can read the tutorial [[התקנת תעודה במכשיר אנדרואיד באמצעות TWRP| here]].
  
after you signing in to the device, go to Settings > More Networks > VPN, a window will pop up that will require a PIN code, enter a different PIN code than previously defined.
+
==== Installation using magisk module: ====
 +
Magisk is the most common software today for rooting a device. When used, an additional component (module) can be used to install the security certificate, You can read the tutorial [[התקנת תעודה במכשיר אנדרואיד באמצעות magisk|here]].
  
Now you can install the security certificate.
+
==== If you do not have Root authorization: ====
 +
There is a partial solution for each app individually, [[Adding a security exception to an app|see here.]]
  
Please note: There are also malfunctions in devices lower than version 7.0 that can be created and, if necessary, consult a specialist technician.
+
There is currently no perfect solution for Android 7 and above without the need for root permissions or custom recovery installation.
==External links==
 
[http://forum.netfree.link/post/9708 http://forum.netfree.link/post/9708]<br />
 
[http://forum.netfree.link/post/34978 http://forum.netfree.link/post/34978]
 
  
===Uninstall certificate===
+
==== '''Installing [[WiFree for Android|wifree App]]:''' ====
https://support.google.com/nexus/answer/2844832?hl=iw
+
The installation will allow access to a custom application store that works even when the security certificate is installed only as a user certificate.

גרסה אחרונה מ־04:10, 17 באוגוסט 2023

לעברית לחצו כאן

To switch from edit view to read view

To search in the Wiki

Home page > Security certificate > Installation of certificate in Android ‎‎


Please note! NetFree does not officially support Android devices, for help and advice you can try our forum.
There is an experimental version of WiFree Software for Android devices, see separate entry WiFree for Android.

Watch the detailed tutorial video

Installation of certificate

There are several options to install the security certificate:


1. In the browser (when connected to NetFree) go to this link http://netfree.link/netfree-ca.crt

After entering the link, the Certificate Installation window pops up, follow the instructions below in option 2, Step 5.


2. If "Can not install because the certificate file was not found" or "Can not find app to open application":

  1. Download the certificate (when connected to NetFree) from here http://netfree.link/netfree-ca.crt via the device's browser, or download the file to a computer [1] and copy to the device (in case there is no browser app on the device).
  2. Open the Settings app אייקון אפליקציית הגדרות on your device.
  3. In the Settings menu click on Security & location > Credential storage / Advanced > Encryption and login information > Install from storage/Install from sd card (please note! The exact settings name varies from device to device, so you can use the search box)
  4. Go to the folder where the downloaded certificate is located from Step 1 > Click on the downloaded file (default certificate name is netfree-ca.crt).
  5. In the panel that opens, give a name to confirm (any possible name) and choose the option VPN and apps
  6. Click on "OK".
  7. If you have not already set up an access code, pattern, or password on your device, you'll be prompted to do so[2].
  8. Repeat these steps and in step 5 select Wi-Fi.

Mote! On Android 11, the only option to install the security certificate is only through the settings app: settings > security > Encryption and login details > Installation certificate > CA approval[3].

On Samsung devices:> Biometric identification and security> Other security settings> Install from device storage

For Android 7.0 and higher

By default, apps do not rely on certificates added by the user. Instead they rely only the pre-included system certificates, so most apps that will not work even after installing the certificate as above. [4]

Solution:

If you have Root authorization, see here or here

Copy the certificate (In Android-optimized format - download from here) to the system certificate folder path system/etc/security/cacerts/ thus causing the certificate to be a system certificate. This can be done easily using the appRoot Certificate Manager, download from here.

General instructions for rooting for those with appropriate technical knowledge appear here - External link.

If TWRP Recovery is installed:

You can copy the certificate to a system certificate folder without rooting. You can read the tutorial here.

Installation using magisk module:

Magisk is the most common software today for rooting a device. When used, an additional component (module) can be used to install the security certificate, You can read the tutorial here.

If you do not have Root authorization:

There is a partial solution for each app individually, see here.

There is currently no perfect solution for Android 7 and above without the need for root permissions or custom recovery installation.

Installing wifree App:

The installation will allow access to a custom application store that works even when the security certificate is installed only as a user certificate.

  1. Make sure that the computer is connected to the same NetFree ISP to which you want to connect the device.
  2. There are devices such as those that exist in vehicles where it is not possible to delete the password from the regular settings menu. To solve this problem, you can use a dedicated application to get the password deleted, Can be downloaded from here.
  3. https://httptoolkit.tech/blog/android-11-trust-ca-certificates/
  4. https://httptoolkit.tech/docs/guides/android/