Android 14

[UjuiUjuMandan]

Add this line to head of post-fs-data.sh to support Android 14.

mount -o bind /system/etc/security/cacerts /apex/com.android.conscrypt/cacerts

Source: https://archive.today/2023.10.11-115149/https://weibo.com/3322982490/Ni21tFiR9

[mrdong916]

https://github.com/nccgroup/ConscryptTrustUserCerts try it, i`m ok

[UjuiUjuMandan]

It somehow stopped working, I don't know if it's Magisk or my ROM's update breaks it. I'm using https://github.com/lupohan44/TrustUserCertificates instead anyway.

[641i130]

Following this method worked better for my setup:
https://httptoolkit.com/blog/android-14-install-system-ca-certificate/

[juvannx]

Following this method worked better for my setup: https://httptoolkit.com/blog/android-14-install-system-ca-certificate/

Thanks for the link, certainly interesting, but the module suggested by @UjuiUjuMandan works perfectly and does exactly the same thing.

[drwpls]

Add this line to head of post-fs-data.sh to support Android 14.

mount -o bind /system/etc/security/cacerts /apex/com.android.conscrypt/cacerts

Source: https://archive.today/2023.10.11-115149/https://weibo.com/3322982490/Ni21tFiR9

Another solution, just replace /data/adb/modules/trustusercerts/post-fs-data.sh as

#!/system/bin/sh
mount -t overlay overlay -o lowerdir=/system/etc/security/cacerts:/data/misc/user/0/cacerts-added /system/etc/security/cacerts

This allows you to dynamically add system CA, just add user CA, system CA will be there without restart device.