How to view Android OS Pre-Installed Root CA SSL Certificates

[Upendra]

Recently I have got a smartphone which is running with Android OS. However I am very much familiar with this operating system because nowadays we can see this OS in most of the portable device either in mobile devices or in tablet PCs. Is there a method to sight the Pre-Installed Root CA SSL Certificates within the Android OS? That is VeriSign, GeoTrust, and so on. Does anybody know about this thing?

[Alondra]

I have spent lots of time demanding to come across a reply to this (I require Android to observe StartSSL certificates). Android 2.1 as well as 2.2 permit you to bring in certificates, except barely for make use of through WiFi as well as VPN. There is no user interface intended for updating the listing of trusted root certificates, except there is conversation regarding adding that aspect. It’s indistinct whether there is a dependable workaround for physically updating and restoring the cacerts.bks file.

[Mrigankasekhar]

Smartphones traditionally not look OSCP or CRLs. So forget it. That is not improving fast. I hope they're in Android, iPhone and WP going to do now. Although it back more traffic over your data channel to pay your hard-UMTS. In Iran, as well as Africa and the rest of Asia is higher than the amount of phones laptops. So grab your audience well you still using an SSL proxy stripping, which can handle everything 10GbE hardware using the generated certificates.

[KennedII]

Android With a minimum of security should be guaranteed by the signature of applications. In fact, these are signed with a signature that the developer's own JAR. The hash dell'apk is used to determine whether a new application can access the same data as the hash of the previous results in the UID under which the application runs. But this system gives us immunity only by applications that try to access data from other applications, and are formed with a different key. No one ensures that the malicious code is not upstream, also because it is the same developer who signs its applications, often with a self-signed certificate type.

[Christina 80]

With these assumptions, and assume that the message INSTALL_APP is protected by SSL only and does not contain any signature system inside the doubts are legitimate. More information will come only when we succeed in discovering more about the GTalk service. The installation system should provide a request / response in order to avoid unwanted automatic installations, the apk installed should be connected to the request for a single device with a key signed by Google. And finally, Google should limit the list of CAs recognized only a few recognized and domains belonging to Google.

[Galbraith]

These root certificates can be installed in addition to the already existing in the browser. The most popular browsers nowadays have already installed the root certificates of most of the largest (mostly American) certification bodies. Once accepted, of course, certificates can also be administered in the browser, then listed and, if cleared. If you visit a page with a certificate or certificate authority is unknown to the browser, so the user will receive a notice with the opportunity to examine the certificate to trust him once or permanently, or to load the certificate into the browser, making the future of appear this point would no longer notice.

[Langward]

GlobalSign is also one of the few certification bodies SGC (Server Gated Cryptography) can offer. This allows SSL Certificates for web servers to force a strong connection with 128-bit encryption to legacy, weak browsers with 40-bit encryption. For the customer, the added power of a 2048 bit Root Certificate and the use of robust encryption SGC-evident, while you can rest assured that the security of your communications always uses the strongest encryption available.