No way to install CA certificate on Android TV box ?

[bed-blip]

Hello,

I'm searching to decrypt TLS traffic on box TV (Xiaomi Mibox3 MDZ-16-AB) with AndroidTV OS.

Unfortunately, I'm not able to install automatically the CA certificate through the addons PCAPdroid-mitm:

I need to skip the CA certificate installation:

So, for sure, the TLS trafic is not decrypted:

Given that it seems impossible to root this TV box, is there a solution to install the CA certificate in order to decrypt TLS traffic ?

Your support should be appreciated here.

Greetings,

[emanuele-f]

Hello, you can try to connect to the device via adb to check if the certificate is valid (e.g. adb pull certpath and then check the file). Nevertheless, root is required to decrypt most apps, except browsers. Using a rooted android emulator is more convenient

[mirh]

The certificate does not install automatically and you are supposed to manually go to the security settings and do it yourself.
Are you saying that you lack such menu?

[emanuele-f]

It's a constraint imposed by the Android framework, for security reasons

[mirh]

If you mean that you have to manually add the certificate, yeah.
But what I was saying is that it wasn't 100% clear what the user's issue even was.

p.s. did you ever consider launching the menu for the user? android.settings.SECURITY_SETTINGS or android.security.MANAGE_CREDENTIALS could quite smooth the experience (there's also android.credentials.INSTALL but it seems way too direct and I'm not suer what certificate store it even uses).

[emanuele-f]

I need to try, I'm not sure this is still allowed by Android

[mirh]

I could get them to work at least from adb.

[fkoemep]

I could get them to work at least from adb.

Could you please explain the process? I am also trying to install a CA cert but got the same issues

[mirh]

Sorry, maybe I wasn't clear enough.
I could get the above intents to open the security/certificate menus for certificate installation, with adb on my phone.

I don't really know if it's possible on android TV, just like I was saying it's not clear if @bed-blip just had troubles because they expected the certificate to be installed automatically, or because the OS legitimately is lacking such capability.