What it takes for an XBox app to trust a custom CA certificate for lab-testing https traffic?

Jess W .net · Dec 7, 2019

Hello,

I am writing this from the context of testing a video streaming application within a test lab on a XBox One.

We have to decrypt and analyze the https traffic generated from this application running in XBox One, and for that we have a 'legal' man-in-the-middle setup (I'm saying 'legal', because this is done within the lab and with every stakeholder's knowledge
& approval). This setup can decrypt https traffic, provided the end devcie trusts the custom CA certificate signed and issued by the mitm entity itself.

My questions is -

How can the custom CA certificate be embedded within the XBox One device? Is it required to have this certificate added in the trusted certificate store of XBox One or it just need to be present with the application itself - similar to certificate pinning
on Android applications? Or in other words, what should I ask the application developers to do in order to enable this?

Thanks!

:)

RafaelMouraB-DB3E4E3

Please open that on MSDN (developers forum).

https://social.msdn.microsoft.com/Forums/en-US/home

USMC-1

Device Info

Advanced Setup

WAN

LAN

Security

Routing

DSL

Port Mapping

Certificate

Local

Trusted CA

Wireless

Diagnostics

Management

OliveFire43270

Buy/Get/ Real Original IELTS certificate without Exam| Genuine IELTS certificate online| IELTS Certificate Dubai/Qatar Kuwait| genuine IELTS certificate| Verify IELTS certificate General/ Academic| Taking IELTS Pakistan/Saudi Arabia

What’s app: +18045851547 | Skype: Certificate Providers

We are a network of English Language Professors with years of Examination experience. During these years, we have been able to derive backdoor means of registering IELTS certificates without Students taking the Test. With our help, you can be able to get real
registered and original IELTS Certificates without facing the stress and trauma of the Exam. The IELTS Certificates we issue carries a score of your choosing and you will be able to verify it online and collect the original TRF or Test report card from local
district Examination Center or we send it directly to you.

With these Certificates you have a shot at a migration process.

Please note that all real IELTS & TOEFL Certificates should Original and registered in the database.

Beware of Fraud!!!

• Do you need Real and IDP/BC verified IELTS Certificates?

• Do you like to Get Band 7 in IELTS Certificate Test?

• Are you trying to get Band 7 or 8 in IELTS certification?

• DO you want Toefl Certificate

We can help you!!!

Email; *** Die E-Mail-Adresse wurde aus Datenschutzgründen entfernt. ***

Real ielts certificate India| buy ielts certificate| original Ielts| Ielts band 7| genuine ielts certificate| Get ielts online|Taking Test IELTS| Genuine certificate| original ielts UK| verified ielts| ielts dubai| Certificate Ielts Kuwait| ielts certificate
Dubai| ielts Certificate online Qatar| ielts Singapore| ielts Saudi Arabia| Ielts certificate without Exam|Certificate without Pakistan

Boom B00M Boom

Here is the Microsoft App certification process:

The app certification process

ArminatorX

It might be that the Xbox 360 browser doesn't have an up to date root certificate library, and that some pages use a digital certificate that is unknown to the Xbox 360. Or it might be that you are trying to go to a site with a self signed certificate (e.g.
a smart home device in your own network).

There is unfortunately nothing you can do about that, as you can't add anything to the Xbox 360's certificate storage.

Depending on what page you are surfing to, you could try to visit the page via unencrypted http instead of https, or if you REALLY trust the page and don't have to transmit personal information like credit card data or passwords, you can ignore the warning.

What it takes for an XBox app to trust a custom CA certificate for lab-testing https traffic?