将证书转为Android识别的格式
方法1
# mitmproxy-ca-cert.cer 文件名
openssl x509 -inform PEM -subject_hash_old -in mitmproxy-ca-cert.cer -noout
# c8750f0d.0为上一步操作输出的内容
cp mitmproxy-ca-cert.cer c8750f0d.0
方法2
openssl x509 -inform DER -in ./FiddlerRoot.cer -out ./FiddlerRoot.pem
openssl x509 -inform PEM -subject_hash_old -in ./FiddlerRoot.pem
# e5c3944b可从上一步的输出中获取
openssl x509 -inform PEM -text -in ./FiddlerRoot.pem > e5c3944b.0
需要修改文件内容为如下格式
-----BEGIN CERTIFICATE-----
MIIDsjCCApqgAwIBAgIQJgpqykqYF55Ed9vsnb4/DjANBgkqhkiG9w0BAQsFADBn MSswKQYDVQQLDCJDcmVhdGVkIGJ5IGh0dHA6Ly93d3cuZmlkZGxlcjIuY29tMRUw EwYDVQQKDAxET19OT1RfVFJVU1QxITAfBgNVBAMMGERPX05PVF9UUlVTVF9GaWRk bGVyUm9vdDAeFw0yMzA4MjMxODU0MjlaFw0yNTExMjAxODU0MjlaMGcxKzApBgNV BAsMIkNyZWF0ZWQgYnkgaHR0cDovL3d3dy5maWRkbGVyMi5jb20xFTATBgNVBAoM DERPX05PVF9UUlVTVDEhMB8GA1UEAwwYRE9fTk9UX1RSVVNUX0ZpZGRsZXJSb290 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8tu01nbxSqsJ6bkrQLO W2W/pEasaOC/NaMugvEz9v0tKCvXv5SYpET/gOrQfGB49mxJaNr66qwZMN1JDuG6 94VOcWCC89GmVgPmtmpW13IJuA7xuKUA9FjI2GkCYa4LDljjPaoVXKS1hvhHqHwR 1+EKyaUcx/p7HCNiPWGDSSPbVDQ0+rMFWppVjMkqxMaO+MLI6hGTQ2do3V6hv06c q6UgwC38jRVcIC2QONuO62g78onl913i1myAaXNMJ5GDxCjDDcM6kB56nc+Z5mw1 H4wB9g8Fb+itf/xe4oNvlk4AzGVV6EawXYgEFT6OzPRNTgyCucPjSTZGwgExGXQH cQIDAQABo1owWDATBgNVHSUEDDAKBggrBgEFBQcDATASBgNVHRMBAf8ECDAGAQH/ AgEAMB0GA1UdDgQWBBQp4ZMFWQDpZGwHtfBJwQASKrHaezAOBgNVHQ8BAf8EBAMC AQYwDQYJKoZIhvcNAQELBQADggEBAB+pyBcklxODqlfNgaVL3bDYa/PJaXftDvLq SDSk3xPKTDrY2Ivea9cKvpW+qxwt0G8JPj6GO7dkYechgFlwxcg0Bg9fYpUnKY7O rNmZJi8me5D209Om39zXsJPPxVXAKhSwD/2tvWZ8FivXsWDKIIjBxLl7F1l3WeUS EoUIoDGQlUkLnsiPwQEfm6QAob7oskHOEJS1XHn99mITyktv5m0EoG8ZhTr8n07s nczN6dGJYaMGqvLZm+RzcNY6zzHJMRRAsnPyr/n9bd9LIL/wC9bc2ofVKRwnIMDc JwHj//uylitIBwPcjRxwGDDcfD3mlqO4EjMxpYH52Ny+F6oZK+4=
-----END CERTIFICATE-----
Certificate: Data: Version: 3 (0x2) Serial Number: 26:0a:6a:ca:4a:98:17:9e:44:77:db:ec:9d:be:3f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: OU = Created by http://www.fiddler2.com, O = DO_NOT_TRUST, CN = DO_NOT_TRUST_FiddlerRoot Validity Not Before: Aug 23 18:54:29 2023 GMT Not After : Nov 20 18:54:29 2025 GMT Subject: OU = Created by http://www.fiddler2.com, O = DO_NOT_TRUST, CN = DO_NOT_TRUST_FiddlerRoot Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:ab:cb:6e:d3:59:db:c5:2a:ac:27:a6:e4:ad:02: ce:5b:65:bf:a4:46:ac:68:e0:bf:35:a3:2e:82:f1: 33:f6:fd:2d:28:2b:d7:bf:94:98:a4:44:ff:80:ea: d0:7c:60:78:f6:6c:49:68:da:fa:ea:ac:19:30:dd: 49:0e:e1:ba:f7:85:4e:71:60:82:f3:d1:a6:56:03: e6:b6:6a:56:d7:72:09:b8:0e:f1:b8:a5:00:f4:58: c8:d8:69:02:61:ae:0b:0e:58:e3:3d:aa:15:5c:a4: b5:86:f8:47:a8:7c:11:d7:e1:0a:c9:a5:1c:c7:fa: 7b:1c:23:62:3d:61:83:49:23:db:54:34:34:fa:b3: 05:5a:9a:55:8c:c9:2a:c4:c6:8e:f8:c2:c8:ea:11: 93:43:67:68:dd:5e:a1:bf:4e:9c:ab:a5:20:c0:2d: fc:8d:15:5c:20:2d:90:38:db:8e:eb:68:3b:f2:89: e5:f7:5d:e2:d6:6c:80:69:73:4c:27:91:83:c4:28: c3:0d:c3:3a:90:1e:7a:9d:cf:99:e6:6c:35:1f:8c: 01:f6:0f:05:6f:e8:ad:7f:fc:5e:e2:83:6f:96:4e: 00:cc:65:55:e8:46:b0:5d:88:04:15:3e:8e:cc:f4: 4d:4e:0c:82:b9:c3:e3:49:36:46:c2:01:31:19:74: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 Subject Key Identifier: 29:E1:93:05:59:00:E9:64:6C:07:B5:F0:49:C1:00:12:2A:B1:DA:7B X509v3 Key Usage: critical Certificate Sign, CRL Sign Signature Algorithm: sha256WithRSAEncryption Signature Value: 1f:a9:c8:17:24:97:13:83:aa:57:cd:81:a5:4b:dd:b0:d8:6b: f3:c9:69:77:ed:0e:f2:ea:48:34:a4:df:13:ca:4c:3a:d8:d8: 8b:de:6b:d7:0a:be:95:be:ab:1c:2d:d0:6f:09:3e:3e:86:3b: b7:64:61:e7:21:80:59:70:c5:c8:34:06:0f:5f:62:95:27:29: 8e:ce:ac:d9:99:26:2f:26:7b:90:f6:d3:d3:a6:df:dc:d7:b0: 93:cf:c5:55:c0:2a:14:b0:0f:fd:ad:bd:66:7c:16:2b:d7:b1: 60:ca:20:88:c1:c4:b9:7b:17:59:77:59:e5:12:12:85:08:a0: 31:90:95:49:0b:9e:c8:8f:c1:01:1f:9b:a4:00:a1:be:e8:b2: 41:ce:10:94:b5:5c:79:fd:f6:62:13:ca:4b:6f:e6:6d:04:a0: 6f:19:85:3a:fc:9f:4e:ec:9d:cc:cd:e9:d1:89:61:a3:06:aa: f2:d9:9b:e4:73:70:d6:3a:cf:31:c9:31:14:40:b2:73:f2:af: f9:fd:6d:df:4b:20:bf:f0:0b:d6:dc:da:87:d5:29:1c:27:20: c0:dc:27:01:e3:ff:fb:b2:96:2b:48:07:03:dc:8d:1c:70:18: 30:dc:7c:3d:e6:96:a3:b8:12:33:31:a5:81:f9:d8:dc:be:17: aa:19:2b:ee
MIIDsjCCApqgAwIBAgIQJgpqykqYF55Ed9vsnb4/DjANBgkqhkiG9w0BAQsFADBn MSswKQYDVQQLDCJDcmVhdGVkIGJ5IGh0dHA6Ly93d3cuZmlkZGxlcjIuY29tMRUw EwYDVQQKDAxET19OT1RfVFJVU1QxITAfBgNVBAMMGERPX05PVF9UUlVTVF9GaWRk bGVyUm9vdDAeFw0yMzA4MjMxODU0MjlaFw0yNTExMjAxODU0MjlaMGcxKzApBgNV BAsMIkNyZWF0ZWQgYnkgaHR0cDovL3d3dy5maWRkbGVyMi5jb20xFTATBgNVBAoM DERPX05PVF9UUlVTVDEhMB8GA1UEAwwYRE9fTk9UX1RSVVNUX0ZpZGRsZXJSb290 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8tu01nbxSqsJ6bkrQLO W2W/pEasaOC/NaMugvEz9v0tKCvXv5SYpET/gOrQfGB49mxJaNr66qwZMN1JDuG6 94VOcWCC89GmVgPmtmpW13IJuA7xuKUA9FjI2GkCYa4LDljjPaoVXKS1hvhHqHwR 1+EKyaUcx/p7HCNiPWGDSSPbVDQ0+rMFWppVjMkqxMaO+MLI6hGTQ2do3V6hv06c q6UgwC38jRVcIC2QONuO62g78onl913i1myAaXNMJ5GDxCjDDcM6kB56nc+Z5mw1 H4wB9g8Fb+itf/xe4oNvlk4AzGVV6EawXYgEFT6OzPRNTgyCucPjSTZGwgExGXQH cQIDAQABo1owWDATBgNVHSUEDDAKBggrBgEFBQcDATASBgNVHRMBAf8ECDAGAQH/ AgEAMB0GA1UdDgQWBBQp4ZMFWQDpZGwHtfBJwQASKrHaezAOBgNVHQ8BAf8EBAMC AQYwDQYJKoZIhvcNAQELBQADggEBAB+pyBcklxODqlfNgaVL3bDYa/PJaXftDvLq SDSk3xPKTDrY2Ivea9cKvpW+qxwt0G8JPj6GO7dkYechgFlwxcg0Bg9fYpUnKY7O rNmZJi8me5D209Om39zXsJPPxVXAKhSwD/2tvWZ8FivXsWDKIIjBxLl7F1l3WeUS EoUIoDGQlUkLnsiPwQEfm6QAob7oskHOEJS1XHn99mITyktv5m0EoG8ZhTr8n07s nczN6dGJYaMGqvLZm+RzcNY6zzHJMRRAsnPyr/n9bd9LIL/wC9bc2ofVKRwnIMDc JwHj//uylitIBwPcjRxwGDDcfD3mlqO4EjMxpYH52Ny+F6oZK+4=
-----END CERTIFICATE-----
Certificate: Data: Version: 3 (0x2) Serial Number: 26:0a:6a:ca:4a:98:17:9e:44:77:db:ec:9d:be:3f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: OU = Created by http://www.fiddler2.com, O = DO_NOT_TRUST, CN = DO_NOT_TRUST_FiddlerRoot Validity Not Before: Aug 23 18:54:29 2023 GMT Not After : Nov 20 18:54:29 2025 GMT Subject: OU = Created by http://www.fiddler2.com, O = DO_NOT_TRUST, CN = DO_NOT_TRUST_FiddlerRoot Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:ab:cb:6e:d3:59:db:c5:2a:ac:27:a6:e4:ad:02: ce:5b:65:bf:a4:46:ac:68:e0:bf:35:a3:2e:82:f1: 33:f6:fd:2d:28:2b:d7:bf:94:98:a4:44:ff:80:ea: d0:7c:60:78:f6:6c:49:68:da:fa:ea:ac:19:30:dd: 49:0e:e1:ba:f7:85:4e:71:60:82:f3:d1:a6:56:03: e6:b6:6a:56:d7:72:09:b8:0e:f1:b8:a5:00:f4:58: c8:d8:69:02:61:ae:0b:0e:58:e3:3d:aa:15:5c:a4: b5:86:f8:47:a8:7c:11:d7:e1:0a:c9:a5:1c:c7:fa: 7b:1c:23:62:3d:61:83:49:23:db:54:34:34:fa:b3: 05:5a:9a:55:8c:c9:2a:c4:c6:8e:f8:c2:c8:ea:11: 93:43:67:68:dd:5e:a1:bf:4e:9c:ab:a5:20:c0:2d: fc:8d:15:5c:20:2d:90:38:db:8e:eb:68:3b:f2:89: e5:f7:5d:e2:d6:6c:80:69:73:4c:27:91:83:c4:28: c3:0d:c3:3a:90:1e:7a:9d:cf:99:e6:6c:35:1f:8c: 01:f6:0f:05:6f:e8:ad:7f:fc:5e:e2:83:6f:96:4e: 00:cc:65:55:e8:46:b0:5d:88:04:15:3e:8e:cc:f4: 4d:4e:0c:82:b9:c3:e3:49:36:46:c2:01:31:19:74: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 Subject Key Identifier: 29:E1:93:05:59:00:E9:64:6C:07:B5:F0:49:C1:00:12:2A:B1:DA:7B X509v3 Key Usage: critical Certificate Sign, CRL Sign Signature Algorithm: sha256WithRSAEncryption Signature Value: 1f:a9:c8:17:24:97:13:83:aa:57:cd:81:a5:4b:dd:b0:d8:6b: f3:c9:69:77:ed:0e:f2:ea:48:34:a4:df:13:ca:4c:3a:d8:d8: 8b:de:6b:d7:0a:be:95:be:ab:1c:2d:d0:6f:09:3e:3e:86:3b: b7:64:61:e7:21:80:59:70:c5:c8:34:06:0f:5f:62:95:27:29: 8e:ce:ac:d9:99:26:2f:26:7b:90:f6:d3:d3:a6:df:dc:d7:b0: 93:cf:c5:55:c0:2a:14:b0:0f:fd:ad:bd:66:7c:16:2b:d7:b1: 60:ca:20:88:c1:c4:b9:7b:17:59:77:59:e5:12:12:85:08:a0: 31:90:95:49:0b:9e:c8:8f:c1:01:1f:9b:a4:00:a1:be:e8:b2: 41:ce:10:94:b5:5c:79:fd:f6:62:13:ca:4b:6f:e6:6d:04:a0: 6f:19:85:3a:fc:9f:4e:ec:9d:cc:cd:e9:d1:89:61:a3:06:aa: f2:d9:9b:e4:73:70:d6:3a:cf:31:c9:31:14:40:b2:73:f2:af: f9:fd:6d:df:4b:20:bf:f0:0b:d6:dc:da:87:d5:29:1c:27:20: c0:dc:27:01:e3:ff:fb:b2:96:2b:48:07:03:dc:8d:1c:70:18: 30:dc:7c:3d:e6:96:a3:b8:12:33:31:a5:81:f9:d8:dc:be:17: aa:19:2b:ee
adb
https://developer.android.google.cn/studio/releases/platform-tools?hl=zh-cn
adb connect 127.0.0.1:62001 // 夜神模拟器
模拟器挂载system目录
文件夹 /system/etc/security/ cacerts
将转化好的证书放到Android系统信任的证书文件夹中,需要挂载一下系统目录.
方法1: 适用于夜神模拟器
# cat /proc/mounts | grep "/system "
# /dev/block/sda6 /system ext4 rw,seclabel,noatime 0 0
mount -o remount,rw /system
方法2: 适用于雷电模拟器
# Android8 以下
adb root
adb remount
# Android 8 以上
adb root
adb shell
# adb disable-verity
mount -o remount -o rw /
暂无评论