Android将我自制的CA证书识别为用户证书，并且未正确安装

Question

I made my own CA certificate using OpenSSL as a CA without touching the certs/crl/index/etc environment's answer , and trying to install it using Add & remove certificates - Nexus Help .

Android recognizes my certificate as "one user certificate":

Instead of "one CA certificate", like in this picture (used a downloaded CA certificate):

Any idea what's causing this?

Answer 1

I fixed the issue. I used Creating a CA and it worked fine.

To install it on Android though, you need to remove the human readable text fro the output cacert.pem and leave only the certificate data, ie the one starting with -----BEGIN CERTIFICATE----- and ending with -----END CERTIFICATE----- , otherwise Android says "No certificate to install".

I think that the previous guide created a regular certificate and then used it as a CA certificate to sign the server certificate, but I'm only guessing, feel free to correct me.