From 766f57fc7c216032d5b6bb3ec45eab9a2c3d35fc Mon Sep 17 00:00:00 2001
From: David Perez <david@livefront.com>
Date: Fri, 26 Jun 2026 10:06:48 -0500
Subject: [PATCH] Allow user certificates

---
 app/src/main/res/xml/network_security_config.xml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/app/src/main/res/xml/network_security_config.xml b/app/src/main/res/xml/network_security_config.xml
index bbfd7a2e34..e8c289abbd 100644
--- a/app/src/main/res/xml/network_security_config.xml
+++ b/app/src/main/res/xml/network_security_config.xml
@@ -23,6 +23,9 @@
         <!-- OCSP Responder Servers -->
         <domain includeSubdomains="true">o.pki.goog</domain>
         <domain includeSubdomains="true">ocsp.sectigo.com</domain>
+
+        <!-- Additionally trust user added CAs -->
+        <certificates src="user" />
     </domain-config>
 
     <domain-config cleartextTrafficPermitted="false">
@@ -32,6 +35,9 @@
         <trust-anchors>
             <!-- Only trust pre-installed CAs for Bitwarden domains and all subdomains -->
             <certificates src="system" />
+
+            <!-- Additionally trust user added CAs -->
+            <certificates src="user" />
         </trust-anchors>
     </domain-config>