Trust user-added CAs

app/src/main/AndroidManifest.xml

@@ -21,7 +21,7 @@
 		android:roundIcon="@mipmap/ic_launcher_round"
 		android:supportsRtl="true"
 		android:theme="@style/AppTheme"
-		android:usesCleartextTraffic="true"
+		android:networkSecurityConfig="@xml/network_security_config"
 		tools:ignore="UnusedAttribute">
 		<activity
 			android:name="org.koitharu.kotatsu.main.ui.MainActivity"

app/src/main/res/xml/network_security_config.xml

@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config xmlns:tools="http://schemas.android.com/tools">
+	<!-- Need to allow cleartext traffic for some sources -->
+	<base-config
+		cleartextTrafficPermitted="true"
+		tools:ignore="InsecureBaseConfiguration">
+		<trust-anchors>
+			<!-- Trust preinstalled CAs -->
+			<certificates src="system" />
+
+			<!-- Additionally trust user added CAs -->
+			<certificates
+				src="user"
+				tools:ignore="AcceptsUserCertificates" />
+		</trust-anchors>
+	</base-config>
+</network-security-config>