From fa097645aba450767330c8dfd22935f270330b7b Mon Sep 17 00:00:00 2001
From: David Perez <david@livefront.com>
Date: Fri, 26 Jun 2026 13:35:54 -0500
Subject: [PATCH] tech-debt: Trust user certificates in debug builds (#7108)

---
 app/src/debug/res/xml/network_security_config.xml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/app/src/debug/res/xml/network_security_config.xml b/app/src/debug/res/xml/network_security_config.xml
index 53a4b88f21..8f1ce1d3c8 100644
--- a/app/src/debug/res/xml/network_security_config.xml
+++ b/app/src/debug/res/xml/network_security_config.xml
@@ -19,8 +19,11 @@
         <domain includeSubdomains="true">bitwarden.eu</domain>
         <domain includeSubdomains="true">bitwarden.pw</domain>
         <trust-anchors>
-            <!-- Only trust pre-installed CAs for Bitwarden domains and all subdomains -->
+            <!-- Trust pre-installed CAs for Bitwarden domains and all subdomains -->
             <certificates src="system" />
+
+            <!-- Additionally trust user added CAs -->
+            <certificates src="user" />
         </trust-anchors>
     </domain-config>