mobile: Add support for trusting user-added CAs on Android

zulip · Sep 23, 2022 · 1a2b051 · 1a2b051
1 parent c35b883
commit 1a2b051
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 1 deletion.
diff --git a/android/app/src/main/AndroidManifest.xml b/android/app/src/main/AndroidManifest.xml
@@ -67,7 +67,8 @@
         android:allowBackup="true"
         android:icon="@mipmap/ic_launcher"
         android:label="@string/app_name"
-        android:theme="@style/AppTheme">
+        android:theme="@style/AppTheme"
+        android:networkSecurityConfig="@xml/network_security_config">
         <activity
             android:name=".MainActivity"
             android:exported="true"

diff --git a/android/app/src/main/res/xml/network_security_config.xml b/android/app/src/main/res/xml/network_security_config.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+      <base-config>
+           <trust-anchors>
+                <certificates src="system" />
+                <certificates src="user" />
+           </trust-anchors>
+      </base-config>
+      <domain-config>
+           <domain includeSubdomains="true">zulipchat.com</domain>
+           <trust-anchors><certificates src="system" /></trust-anchors>
+      </domain-config>
+      <domain-config>
+           <domain includeSubdomains="true">zulip.org</domain>
+           <trust-anchors><certificates src="system" /></trust-anchors>
+      </domain-config>
+ </network-security-config>