From fce9f543e17e9dc118e6e70d2ab667a1557ec057 Mon Sep 17 00:00:00 2001
From: Zakhar Timoshenko <vp1984tanki@gmail.com>
Date: Mon, 4 Oct 2021 18:41:01 +0300
Subject: [PATCH] Trust user-added CAs

---
 app/src/main/AndroidManifest.xml                |  2 +-
 .../main/res/xml/network_security_config.xml    | 17 +++++++++++++++++
 2 files changed, 18 insertions(+), 1 deletion(-)
 create mode 100644 app/src/main/res/xml/network_security_config.xml

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index e18e81392..b9aa1d3f1 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -21,7 +21,7 @@
 		android:roundIcon="@mipmap/ic_launcher_round"
 		android:supportsRtl="true"
 		android:theme="@style/AppTheme"
-		android:usesCleartextTraffic="true"
+		android:networkSecurityConfig="@xml/network_security_config"
 		tools:ignore="UnusedAttribute">
 		<activity
 			android:name="org.koitharu.kotatsu.main.ui.MainActivity"
diff --git a/app/src/main/res/xml/network_security_config.xml b/app/src/main/res/xml/network_security_config.xml
new file mode 100644
index 000000000..a1fe42507
--- /dev/null
+++ b/app/src/main/res/xml/network_security_config.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config xmlns:tools="http://schemas.android.com/tools">
+	<!-- Need to allow cleartext traffic for some sources -->
+	<base-config
+		cleartextTrafficPermitted="true"
+		tools:ignore="InsecureBaseConfiguration">
+		<trust-anchors>
+			<!-- Trust preinstalled CAs -->
+			<certificates src="system" />
+
+			<!-- Additionally trust user added CAs -->
+			<certificates
+				src="user"
+				tools:ignore="AcceptsUserCertificates" />
+		</trust-anchors>
+	</base-config>
+</network-security-config>
\ No newline at end of file