From d86e820a165ffca4f4394ebb4c5b474716d08155 Mon Sep 17 00:00:00 2001
From: edde746 <86283021+edde746@users.noreply.github.com>
Date: Tue, 14 Jul 2026 00:24:54 +0200
Subject: [PATCH] fix(android): trust user-installed CAs

---
 android/app/src/main/AndroidManifest.xml               |  1 +
 .../app/src/main/res/xml/network_security_config.xml   | 10 ++++++++++
 2 files changed, 11 insertions(+)
 create mode 100644 android/app/src/main/res/xml/network_security_config.xml

diff --git a/android/app/src/main/AndroidManifest.xml b/android/app/src/main/AndroidManifest.xml
index aee6bcbe..0a97a2e8 100644
--- a/android/app/src/main/AndroidManifest.xml
+++ b/android/app/src/main/AndroidManifest.xml
@@ -41,6 +41,7 @@
         android:banner="@drawable/tv_banner"
         android:appCategory="video"
         android:largeHeap="true"
+        android:networkSecurityConfig="@xml/network_security_config"
         android:usesCleartextTraffic="true">
         <activity
             android:name=".MainActivity"
diff --git a/android/app/src/main/res/xml/network_security_config.xml b/android/app/src/main/res/xml/network_security_config.xml
new file mode 100644
index 00000000..e1a44ef0
--- /dev/null
+++ b/android/app/src/main/res/xml/network_security_config.xml
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+    <!-- Media servers may be HTTP or use a private CA installed by the device owner. -->
+    <base-config cleartextTrafficPermitted="true">
+        <trust-anchors>
+            <certificates src="system" />
+            <certificates src="user" />
+        </trust-anchors>
+    </base-config>
+</network-security-config>