From 0ee17cc0ee943fea417faf9cbec50bbeebdd9cd3 Mon Sep 17 00:00:00 2001
From: Leendert de Borst <ldeborst@xivisoft.com>
Date: Mon, 15 Sep 2025 14:56:49 +0200
Subject: [PATCH] Enable Android app local user added CA root cert
 compatibility (#1214)

---
 apps/mobile-app/android/app/src/main/AndroidManifest.xml | 2 +-
 .../app/src/main/res/xml/network_security_config.xml     | 9 +++++++++
 2 files changed, 10 insertions(+), 1 deletion(-)
 create mode 100644 apps/mobile-app/android/app/src/main/res/xml/network_security_config.xml

diff --git a/apps/mobile-app/android/app/src/main/AndroidManifest.xml b/apps/mobile-app/android/app/src/main/AndroidManifest.xml
index 6657e225b..8dfe4d8f8 100644
--- a/apps/mobile-app/android/app/src/main/AndroidManifest.xml
+++ b/apps/mobile-app/android/app/src/main/AndroidManifest.xml
@@ -12,7 +12,7 @@
       <data android:scheme="https"/>
     </intent>
   </queries>
-  <application android:name=".MainApplication" android:label="@string/app_name" android:icon="@mipmap/ic_launcher" android:roundIcon="@mipmap/ic_launcher_round" android:allowBackup="true" android:theme="@style/AppTheme" android:supportsRtl="true" android:usesCleartextTraffic="true" android:localeConfig="@xml/locales_config">
+  <application android:name=".MainApplication" android:label="@string/app_name" android:icon="@mipmap/ic_launcher" android:roundIcon="@mipmap/ic_launcher_round" android:allowBackup="true" android:theme="@style/AppTheme" android:supportsRtl="true" android:usesCleartextTraffic="true" android:localeConfig="@xml/locales_config" android:networkSecurityConfig="@xml/network_security_config">
     <meta-data android:name="expo.modules.updates.ENABLED" android:value="false"/>
     <meta-data android:name="expo.modules.updates.EXPO_UPDATES_CHECK_ON_LAUNCH" android:value="ALWAYS"/>
     <meta-data android:name="expo.modules.updates.EXPO_UPDATES_LAUNCH_WAIT_MS" android:value="0"/>
diff --git a/apps/mobile-app/android/app/src/main/res/xml/network_security_config.xml b/apps/mobile-app/android/app/src/main/res/xml/network_security_config.xml
new file mode 100644
index 000000000..aa41ac819
--- /dev/null
+++ b/apps/mobile-app/android/app/src/main/res/xml/network_security_config.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+  <base-config cleartextTrafficPermitted="true">
+    <trust-anchors>
+      <certificates src="system"/>
+      <certificates src="user"/> <!-- opt-in to user-installed CAs -->
+    </trust-anchors>
+  </base-config>
+</network-security-config>