Burp Certificate - Android Emulator System Store

README.md

Generate certificate

openssl req -x509 -days 365 -nodes -newkey rsa:2048 -outform der -keyout server.key -out ca.der

Convert certificate and key

openssl rsa -in server.key -inform pem -out server.key.der -outform der
openssl pkcs8 -topk8 -in server.key.der -inform der -out server.key.pkcs8.der -outform der -nocrypt

Import certificate in Burp

• Proxy -> Options -> Proxy Listeners -> Import / export CA certificate
• Certificate and private key in DER format
  • CA: ca.der
  • Key: server.key.pkcs8.der

Launch Android Emulator writable

VM=Nexus_9_API_28
$ANDROID_HOME/tools/emulator "${VM}" -writable-system &

Push certificate

CERTNAME=ca.der
CERTHASHNAME=$(openssl x509 -inform DER -subject_hash_old -in "${CERTNAME}" | head -1).0
$ANDROID_HOME/platform-tools/adb root
$ANDROID_HOME/platform-tools/adb remount
$ANDROID_HOME/platform-tools/adb push ${CERTNAME} /system/etc/security/cacerts/${CERTHASHNAME}