Adding Root Certificates to Android Phone with root access

Yeah, after being really busy with my real life, here is another intresting trick for you:

How to get some more root certificates on an android phone where you have root acces (or, at least, you can start & use root explorer).

Some background info:
I use a funabol community server to keep my phone’s and outlook’s in sync and recently my colleague sven did a great job converting my HTC HD2 with winmobile to Android 2.x (kudo’s to him! thanks!).

Update on 2011-12-27: I changed the client to allow self-signed certificates: here

The challenge is that if you use funabol with self signed ssl certificates you need to get those recognized by android which is a really complicated task if you don’t know how.  But here we go:

What you need before (and what i don’t describe):

Our steps include:

  1. Export the certificate out of the funambol java keystore
  2. Get the cacert.bks from the android device
  3. modify the cacerts.bks of android
  4. reboot and finished

Step 1 – Export the funambol certificate

  • Execute  “%JAVA_HOME%\bin\keytool -export -alias tomcat -file myroot.cer”  (in-detail like here)
  • copy the myroot.cer to the SD-Card of the android device (or download to another computer)

Step 2

  • insert the SD-Card to the android device, startup root explorer and navigate to /etc/security/
  • copy the file cacert.bks
  • navigate to /sd-card and paste the file
  • insert to another computer
  • Go and execute the Portecle Keytool and open the cacerts.bks from your SD-Card
  • When promtes for a password, just hit enter
  • go to Tools -> Import Key Pair   and select your myroot.cer, give it any name you want
  • save the cacerts.bks
  • re-insert the SD-Card to android device
  • open up root explorer, head to /sd-card, copy, paste to /etc/security/
  • make sure root explorer show “mounted as r/w” in the header of the program.
  • set permissions of the newly copied cacert.bks to rw-r–r– (owner,group,other: read     owner:write)

Step 3

  • double check if the permissions of cacerts.bks are set correctly to rw-r–r–
  • restart the phone
  • funambol sync should now complete.

Have phun to be in sync!

P.S. Keep in touch! the next xbee’s blogpost’s are half-way written, but i really don’t have time ATM… sry

Advertisements

QuickFix: IE8 hangup opening intranet pages

Something that i always hate is when there is no update and a product stop’s working so i cannot do my work anymore.

In this case i (am forced to) use Internet Explorer to open up several intranet pages that allowed me to do my administration work.

The problem sums like this:

  • Google, and everything else on “the internet” works seemless
  • opening something internal just hang up IE8 for a couple of minutes and then just stop loading without an error
  • Same in FireFox with IETab installed
  • same in IE 7 + IE 8 64 bit and 32 bit

The solution is as easy as stupid:

In “Internet Options”  -> “Security” the “Local Intranet” is set up with disabled “Protected Mode”.
Enabling it fixed
the Problem instantly for IE8, IE7 and Firefox with IETab.

Weekend Project: Connect a letterbox to Jabber with XBee

As i promised this is my first XBee Project. I just needed a more or less useful application i can “test” the XBee’s in a real environment.

It is in my nature to do crazy things, so i thought it would be really cool to have a notification Jabber Message to my Phone when someone put some letters for me in my letterbox. Here it is ;)

01-08-2010 Update:
The FTDI Chip gives me A fscking LOT PAIN more to come in the next Post. DO NOT USE IT :)

This is my Setup:

  • XBee “Coordinator” API Mode connected through a FTDI USB Chip to a linux box
  • XBee “End Device” Interfaced with an Atmel ATTiny13v power by two 1.5v AA Batteries
  • Perl XBee Module API.pm from Thomas Jager
  • Jabber Perl Modules to enable sending messages
  • Siemens S685IP DECT Phone that can recieve Jabber messages

Before you read further you should note that i flashed the ZIGBEE firmware (XB24-ZB) API on my XBee’s because i don’t want to miss the mesh feature.

This Setup now runs with 2x Alkaline Batterys in the End-Device for 4 weeks now, and is still running!

Continue reading “Weekend Project: Connect a letterbox to Jabber with XBee”

Evening Project: The Brain Machine

Recently, well 1 year ago, i readed in The Make Zine about a Project called “The Brain Machine”.

This is a modified Atmel circuit that claims: “Get altered states of consciousness with this microcontroller-driven sound and light device.” by Mitch Altman.

Continue reading “Evening Project: The Brain Machine”

Sick My XBEE

This is the Story i had the last weekend with some cool Chips named “XBEE”.
These Chips are intelligent RS-232 -> Wireless sender and reciever who can stickt together to a so called mesh network.

First i have to tell the terminology:
“Coordinator” – is the Main Boss of the Network, who coordinates everything – and let routers and endpoints connect
“Router” – is a endpoint but can route packets and other endpoints can connect to it.
“End Device” – is a endpoint but noone can conenct to it – it is designed to save energy and run from batteries.

Mesh Networking is really fantastic because you can have a coordinator (“middle”) which is connected to routers and end devices, and is “self-healing” this means if a router is powered off, packets get automatically routed through another reachable router – so packets can arrive to their destination.
If a Enddevice don’t have a connection to a router or the coordinator, put a router in between and it will connect seamless without configuring routing or anything manually.

More about the theory you can find in the references section at the end of my Post.

Okay, first a Picture of my actual “Setup” then the painful story :)

Continue reading “Sick My XBEE”

Multi-Boot USB Thumb Drive

Ever thought it might be cool to only have an USB-Stick where all your individual security / pentest / recovery / hack-a-tack bootdiscs can be booted?

I thought so!

Crawling the Internet looks promising and shows two different ways how to get an bootdisc on your USB thumbdrive:

  • Booting a bootdisc as ISO stored on the drive (which is not compatible to most bootdisc’s)
  • Booting abootdisc ISO extracted to a extra Partition on the USB-Drive (which is more compatible)

Remember: both ways are possible on a single Stick, so you can have ISO’s there AND extra partitions with the contents of the original ISO.

Continue reading “Multi-Boot USB Thumb Drive”

Microsoft, please get a XBOX QA-Responsible!

Lol lol lol…

What i really like when i hear “Microsoft” is that they want to make good products but they always manages to make a very uber big FAIL.
I must say im not a fan of this company – but i use, like a lot of people, some of their products.

Today i started playing XBOX360 () in a free time schedule i had between my job and my familiy…
Playing playing pla, – zzzz – Freeze
Damn. Ok no prob. Console turned off and on again.

But what the heck is that?! 3 red lights?
Fuck! This is the red ring of death.

Continue reading “Microsoft, please get a XBOX QA-Responsible!”