Can't install a new p12 user certificate I can't import a new company-issued personal certificate in binary .p12 format. The old one worked fine, I have a new one (CA was updated so we had to be issued new ones) that fails the import.

Both have the same password and the old one imports fine, yet the new one doesn't. When the (correct) password is entered, it prompts for it again with "Type the correct password." error message. When I export it (from Firefox) with another password, it fails the same. If exported without password, Certificate Installer crashes ("Certificate Installer has stopped unexpectedly. Would you like to send an report to HTC? This will help us improve our products.)

I don't want to send report because I'm afraid of the certificate being leaked.

My Android version is 7.1.1, kernel 4.4.21-perf-g0a2f731cb614, Android security patch level June 1, 2017, the device is a stock unrooted up-to-date HTC U11.

I don't have any other Android device to test it on. The certificate imports fine in Windows, Firefox on Windows and Firefox on Linux.

Any suggestion on how to debug this? Is there a known incompatibility with some ciphering maybe?

Both the working old and not working new certificates are located for import in the same folder in the internal memory.
Android Nougat doesn't allow to install user specific CA certificates. From Google blog:


  By default, apps that target API level 24 will—by design—not honor
  such CAs unless the app explicitly opts in. This safe-by-default
  setting reduces application attack surface and encourages consistent
  handling of network and file-based application data.