$ filter --tag certificate

The Android CA Trust Store Across Versions

Why your proxy CA strategy depends entirely on the Android version: the three breakpoints — user-store trust (≤6), system-store-only (7+), read-only root (9–10), and APEX (14+) — that decide whether you need root and how you inject the cert.

Android · 2026-03-07

Certificate Injection — Android < 14

Installing a BurpSuite CA into the system trust store on Android 13 and below via direct /system remount, the hash-based filename rule, plus an OpenSSL certificate-operations reference.

Android <14 · 2026-03-07