GNOME Bugzilla – Bug 725721
Use system certificate storage for checking TLS certificates
Last modified: 2018-05-04 13:24:41 UTC
See summary. On Android we could use /system/etc/security/cacerts for system certs and /data/misc/keystore for certs installed by the user. The former is a normal directory with certificates one per file, the latter unfortunately seems to be encrypted. Might need to implement some JNI magic that uses the public Android API. No idea what we can do on iOS, OSX and Windows yet.
Alternatively we could of course ship our own collection of CA certificates like Mozilla does
We ship our own certificates