Support Android 14

Author: zhaoboy9692

README.md

@@ -5,6 +5,9 @@ Copies certificates from the user certificate store into the system store. Also
 Note that this is a significant change from the historical use of this module.  By copying, instead of moving, the Certificate Transparency problem for proxying Google Chrome has been solved.  See notes and links in the changelog below for more details on this.
 
 ## Changelog
+v2.0.2
+* support Android 14
+
 v2.0.1
 * Updated install messages
 * Fixed the release binary. I'd previously accidentally included the entire .git repository in the installer zip.  Whoopsie. Down to 8KB when I had it at 80KB before.

common/post-fs-data.sh

@@ -13,15 +13,37 @@ MODDIR=${0%/*}
 # mv -f /data/misc/user/0/cacerts-added/12abc345.0 $MODDIR/system/etc/security/cacerts
 
 cp -f /data/misc/user/0/cacerts-added/* $MODDIR/system/etc/security/cacerts
-chown -R 0:0 $MODDIR/system/etc/security/cacerts
 
 [ "$(getenforce)" = "Enforcing" ] || exit 0
+A14CA_PATH=/apex/com.android.conscrypt/cacerts
+if [ -d "$A14CA_PATH" ]; then
+    #Support Android 14, Thanks https://weibo.com/3322982490/Ni21tFiR9
+    CA_TMP_DIR=/data/local/tmp/cacerts
+    rm -rf "$CA_TMP_DIR"
+    mkdir -p -m 700 "$CA_TMP_DIR"
+    mount -t tmpfs tmpfs "$CA_TMP_DIR"
 
-default_selinux_context=u:object_r:system_file:s0
-selinux_context=$(ls -Zd /system/etc/security/cacerts | awk '{print $1}')
+    cp -f $A14CA_PATH/* $CA_TMP_DIR
+    cp -f $MODDIR/system/etc/security/cacerts/* $CA_TMP_DIR
 
-if [ -n "$selinux_context" ] && [ "$selinux_context" != "?" ]; then
-    chcon -R $selinux_context $MODDIR/system/etc/security/cacerts
-else
-    chcon -R $default_selinux_context $MODDIR/system/etc/security/cacerts
+    chown -R 0:0 "$CA_TMP_DIR"
+    set_context "$A14CA_PATH" "$CA_TMP_DIR"
+    CNUM="$(ls -1 $CA_TMP_DIR | wc -l)"
+    if [ "$CNUM" -gt 10 ]; then
+        mount -o bind "$CA_TMP_DIR" $A14CA_PATH
+    fi
+    umount "$TEMCA_TMP_DIRP_CA_TMP_DIRDIR"
+    rmdir "$CA_TMP_DIR"
+    rm -rf "$CA_TMP_DIR"
+else 
+    chown -R 0:0 $MODDIR/system/etc/security/cacerts
+    default_selinux_context=u:object_r:system_file:s0
+    selinux_context=$(ls -Zd /system/etc/security/cacerts | awk '{print $1}')
+    if [ -n "$selinux_context" ] && [ "$selinux_context" != "?" ]; then
+        chcon -R $selinux_context $MODDIR/system/etc/security/cacerts
+    else
+        chcon -R $default_selinux_context $MODDIR/system/etc/security/cacerts
+    fi    
 fi
+
+    

module.prop

@@ -1,6 +1,6 @@
 id=movecert
 name=Move Certificates
-version=v2.0.1
+version=v2.0.2
 versionCode=1
-author=yochananmarqos (edited by Andy Acer)
+author=yochananmarqos (edited by Andy Ace And zhaoboy9692)
 description=Copies certificates from the user certificate store into the system store. Removes the *Network may be monitored* warning.