$ grep category=Certificate Injection

The Android CA Trust Store Across Versions

Why your proxy CA strategy depends entirely on the Android version: the three breakpoints — user-store trust (≤6), system-store-only (7+), read-only root (9–10), and APEX (14+) — that decide whether you need root and how you inject the cert.

Android · 2026-03-07

Certificate Injection — Android < 14

Installing a BurpSuite CA into the system trust store on Android 13 and below via direct /system remount, the hash-based filename rule, plus an OpenSSL certificate-operations reference.

Android <14 · 2026-03-07

Certificate Injection — Android 14+ (APEX)

Android 14 moved the CA store under an APEX module with per-process mount namespaces. Injecting a cert now means tmpfs overlay plus nsenter into every Zygote and app namespace.

Android 14+ · 2026-03-07