Update root CA certificates for legacy Android AppSupport system

General
2

The current root CA collection officially shipped with Android can be found here: files - platform/system/ca-certificates - Git at Google. To install this collection, proceed as follows:

  1. Create a folder, e.g. my-ca-certs in a suitable location (with a file brower or in the terminal with mkdir my-ca-certs).
  2. Download the archive of all certificates by clicking onto “tgz” in the website mentioned above and store it in your chosen folder. This should yield a file named ca-certificates-refs_heads_main-files.tar.gz.
  3. Assuming you are in your certificate folder from Step 1, create a subfolder, e. g. new, for extracting the archive:
    mkdir new
  4. Extract the certificates contained in the archive into the new folder:
    tar -xf ca-certificates-refs_heads_main-files.tar.gz -C new/
  5. Create a subfolder, e. g. bak, for backing-up the current certificate collection:
    mkdir bak
  6. Create a backup of the existing root certificate collection of the AppSupport system:
    cp /opt/alien/system/etc/security/cacerts/* bak/
  7. Copy the new certifcate collection into the AppSupport system:
    devel-su cp new/* /opt/alien/system/etc/security/cacerts/
5 Likes