I installed the latest version of Orbot via Github.
At the first launch it was reported that certificates were not up to date.
After my permission something was downloaded.
After that Orbot worked perfectly.

To check, if I can undo the changes, I uninstalled Orbot and reinstalled.
At start this time there was no report regarding certificates.
However, under user-certificates is not an entry.
So has Orbot updated the system certificates?

    Thank you for the answer.
    The question arises: Where are the certificates stored that Orbot has updated?

      • [deleted]

      • Post #4
      • Edited

      novizz His answer was "no" so they are stored nowhere since they weren't updated. XD.

        novizz I am not sure what could have happened. I've never heard of Orbot doing what you're describing.

        If it is a certificate, I don't believe it can be added to your system certificates. You'd find it with user certificates. Check for that here: Settings > Security > More security settings > Encryption & credentials. I'd look under user credentials or under the user tab in trusted credentials.

          Thank you for the feedback.

          As I wrote (I called it "user-certificates"), there is under "user credentials" and
          "the user tab in trusted credentials" nothing.
          That was the reason why I asked my question.
          (When I realized that by uninstalling Orbot I could not return the system (in regard to Orbot) to the original state, I was first looking there whether the updated certificates are there)

          Since I am an amateur, I don't know if one can possibly find out what happened with the help of "View logs".
          (I don't know what and when, is being recorded there and how to read it)

          novizz The question arises: Where are the certificates stored that Orbot has updated?

          Maybe you read something wrong. Tor loads the consensus when bootstrapping from the directory authorities. Stored in cached-certs & cached-microdesc-consensus. (I believe it's in the unreadable app storage on Android)

          This has nothing to do with the Android System Trust Store.

            I believed up to now that deinstallation will remove all of app-related data.

              novizz It does remove all of the app's data from both the app's internal storage and the scoped directory in your home directory. Apps can provide the option to preserve data on uninstall which requires that you toggle on the off-by-default option in the uninstall dialog but very few apps provide this option even though it would be useful for many of them.

                Thank you for the clarification.

                I checked it again. Orbot does not offer me the mentioned option in the uninstallation dialog.

                Therefore, for me the question remains where are the certificates that Orbot after the 2. Installation has apparently accepted as currently, and therefore at 2. first start has not requested anymore.

                A question would also be whether other users received the notification at first start that certificates are outdated.