Android7以上系统导入CA证书,实现HTTPS抓包

#计算导出的证书hash值
openssl x509 -inform DER -subject_hash_old -in FiddlerRoot.cer
openssl x509 -inform PEM -subject_hash_old -in FiddlerRoot.pem

269953fb
-----BEGIN CERTIFICATE-----
MIIDsjCCApqgAwIBAgIQJhX2PuwREa9MvkM4pTUMajANBgkqhkiG9w0BAQsFADBn
MSswKQYDVQQLDCJDcmVhdGVkIGJ5IGh0dHA6Ly93d3cuZmlkZGxlcjIuY29tMRUw
EwYDVQQKDAxET19OT1RfVFJVU1QxITAfBgNVBAMMGERPX05PVF9UUlVTVF9GaWRk
bGVyUm9vdDAeFw0yMDEwMDgxMTUwMjlaFw0yNDAxMDcxMTUwMjlaMGcxKzApBgNV
BAsMIkNyZWF0ZWQgYnkgaHR0cDovL3d3dy5maWRkbGVyMi5jb20xFTATBgNVBAoM
DERPX05PVF9UUlVTVDEhMB8GA1UEAwwYRE9fTk9UX1RSVVNUX0ZpZGRsZXJSb290
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowIrdB1i1eunUhF/LWI0
KNlXJzcbSGwvBsYXH4XR/qZlVyRzrRsJ KSErfoGa6zXizPV3U42QNeNuE2iPRis
8dBHnRn9IO/JF7JACDUX57bZzw9xNnVhkhmp/w9e403B75bv9itbM1Ftwczb3CZo
4gEGNE7YlEvWw4ymSpUfeDNJPQhDikGKmYl69ZjNu228KzlSgfdyCINMx6yqFf31
Zra z4z221Wa0QmlHNDMEh5YYu7qZqo4Dv/kAzMKYK4lP0wXjf7fK jlrAwN2MZo
Dvn mXqiJ2ct0Val1ZIBPYbHHj0H2JL3B19rZwHeyDvTjN9d1RPMfPvnEN/nS6KA
XQIDAQABo1owWDATBgNVHSUEDDAKBggrBgEFBQcDATASBgNVHRMBAf8ECDAGAQH/
AgEAMB0GA1UdDgQWBBQWm3C3B5SfYklbcgAl5epL6FmkpzAOBgNVHQ8BAf8EBAMC
AQYwDQYJKoZIhvcNAQELBQADggEBAHD08u3BmlD IPp5kUv2 JHTk4D0LNxDg8lI
jZv6uobsn9XtezQXsT 3TTmAUQALz/ZU7d7mY/tjBM5qV8lQXK28AhjqjzdKr m7
R4Ei12vyMjXz3RwXbQE00GIJOGnfj F9NZ6RkFiEUeT00HG6aKhf3bcHeyDEfBhK
c7B zRq09WWp5fAVghrcjwMTa8gz5PCtVMhSZrhnOM MR5jAugvk69JSG8/Mt0es
Fn1JUf8v/xYX56A3TOSHjkpeBnq0GdojdtVL8ohkzswlOZ4As R3XT3PXzuYM1V
lVxfhNwRjmlV48gqsZdRhL3Zorrkv7YJU43tBhHzKPcwPHZjXIc=
-----END CERTIFICATE-----

#生成系统预设格式证书文件
openssl x509 -inform DER -text -in FiddlerRoot.cer > 269953fb.0
openssl x509 -inform PEM -text -in FiddlerRoot.pem > 269953fb.0

#修改导出的证书文件格式
编辑输出的文件-----BEGIN CERTIFICATE-----最后一部分移到开头

#将证书文件上传到手机系统
1. adb push 0dd2455e.0 /sdcard
2. adb shell
3. su
4. mount -o remount,rw /system
5. cp /sdcard/269953fb.0 /system/etc/security/cacerts/
6. chmod 644 /system/etc/security/cacerts/269953fb.0