cryptomator / cryptomator/android
Using custom CA certificates
- 主要语言
- Kotlin
- 星标
- 1.2k
- 派生
- 216
- PR 合并指标
- 30 天内没有已合并 PR
描述
### Please agree to the following
- [x] I have searched [existing issues](https://github.com/cryptomator/android/issues?q=) for duplicates
- [x] I agree to follow this project's [Code of Conduct](https://github.com/cryptomator/android/blob/develop/.github/CODE_OF_CONDUCT.md)
### Summary
Implementing the ability to use custom CA certificates for webdav
### Motivation
When I connect to my server over webdav-https, I am asked if I trust the certificate. I do in my case and normally the root CA, which is my custom certificate, is already stored in the android certificate manager. Thus, it seems what is missing is a way to automatically compare TLS certificates against custom root certificates.
This can for example be done by somehow accessing the system CA certificates or by for example importing a CA file when setting up a webdav connection.
### Considered Alternatives
_No response_
### Anything else?
_No response_
贡献指南
调研方向
Start with the WebDAV-HTTPS connection setup and Android certificate manager behavior described in the issue. Compare using system CA certificates with importing a CA file, then define the supported configuration and verify that a WebDAV connection using a trusted custom root certificate succeeds without an unwanted certificate prompt.
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- android, kotlin
- 领域
- security
- Issue 类型
- 功能
- 难度
- 5/5
- 预计耗时
- 一周以上
- 活跃度
- 冷清
- 描述清晰度
- 需要澄清
- 新手友好度
- 35/100