From 0d3933c9fb044175a46249ea2bc7890622d26071 Mon Sep 17 00:00:00 2001
From: deep2web <88986286+deep2web@users.noreply.github.com>
Date: Sat, 25 Jul 2026 20:01:59 +0200
Subject: [PATCH 01/10] ad mTLS Client authentication

---
 app.config.ts             |   6 +-
 components/ServerForm.tsx | 130 +++++++++++++++++++++++++++++++++++++-
 i18n/de.json              |   6 +-
 i18n/en.json              |   6 +-
 package-lock.json         |  32 ++++++++++
 package.json              |   2 +
 screens/MainScreen.tsx    |  21 ++++++
 types.ts                  |   6 ++
 utils/server.ts           |   6 ++
 9 files changed, 207 insertions(+), 8 deletions(-)

diff --git a/app.config.ts b/app.config.ts
index 426d2f9a..8225376e 100644
--- a/app.config.ts
+++ b/app.config.ts
@@ -66,11 +66,9 @@ export default ({ config }: ConfigContext) =>
       plugins: [
         "@bacons/apple-targets",
         ["./scripts/fdroid/configureFdroid.ts"],
-        [
-          "./scripts/detox/configureDetox.ts",
-          { subdomains: "*" }, // uncomment to debug app
-        ],
+        ["./scripts/detox/configureDetox.ts", { subdomains: "*" }], // uncomment to debug app
         ["./scripts/trustUserCAs.ts"],
+        ["./scripts/withClientCertPatch.ts"],
         ["./scripts/increaseGradleMemory.ts"],
         [
           "expo-build-properties",
diff --git a/components/ServerForm.tsx b/components/ServerForm.tsx
index 25f2f04e..c1926c69 100644
--- a/components/ServerForm.tsx
+++ b/components/ServerForm.tsx
@@ -3,9 +3,13 @@ import { Text, Button, Input, CheckBox } from "@ui-kitten/components";
 import { cleanServerUrl, sameServer, verifyEvccServer } from "../utils/server";
 import LoadingIndicator from "./animations/LoadingIndicator";
 import { useTranslation } from "react-i18next";
-import { BasicAuth, Server } from "types";
+import { BasicAuth, ClientCert, Server } from "types";
 import { useAppContext } from "./AppContext";
 import ScanQRCodeButton from "./ScanQRCodeButton";
+import * as DocumentPicker from "expo-document-picker";
+import * as FileSystem from "expo-file-system/legacy";
+import { storeCert } from "../utils/certStorage";
+import NativeClientCertModule from "../modules/test-module/src/TestModule";
 
 interface ServerFormProps {
   server: Server | undefined;
@@ -44,6 +48,7 @@ export default function ServerForm({
       title: internalServer?.title,
       url,
       basicAuth: internalServer?.basicAuth || {},
+      clientCert: internalServer?.clientCert,
     });
   };
   const setInternalAuth = (basicAuth: BasicAuth) => {
@@ -51,9 +56,56 @@ export default function ServerForm({
       title: internalServer?.title,
       url: internalServer?.url || "",
       basicAuth,
+      clientCert: internalServer?.clientCert,
     });
   };
 
+  const [certPassword, setCertPassword] = useState("");
+  const [certBase64, setCertBase64] = useState<string | undefined>();
+  const [certLabel, setCertLabel] = useState<string | undefined>();
+
+  const toggleClientCert = (enabled: boolean) => {
+    if (!enabled) {
+      setCertBase64(undefined);
+      setCertPassword("");
+      setCertLabel(undefined);
+      setInternalServer({
+        ...internalServer,
+        url: internalServer?.url || "",
+        basicAuth: internalServer?.basicAuth || {},
+        clientCert: undefined,
+      });
+    } else {
+      setInternalServer({
+        ...internalServer,
+        url: internalServer?.url || "",
+        basicAuth: internalServer?.basicAuth || {},
+        clientCert: { label: "", secureStoreKey: "" },
+      });
+    }
+  };
+
+  const pickCertificate = async () => {
+    try {
+      const result = await DocumentPicker.getDocumentAsync({
+        type: ["application/x-pkcs12", "application/pkcs12", "application/octet-stream"],
+        copyToCacheDirectory: true,
+      });
+
+      if (result.canceled) return;
+
+      const file = result.assets[0];
+      const base64 = await FileSystem.readAsStringAsync(file.uri, {
+        encoding: FileSystem.EncodingType.Base64,
+      });
+
+      setCertBase64(base64);
+      setCertLabel(file.name);
+    } catch (e) {
+      console.log("Error picking certificate", e);
+    }
+  };
+
   const validateAndSaveURL = async () => {
     if (inProgress) return;
     if (!internalServer?.title?.trim()) return;
@@ -68,14 +120,32 @@ export default function ServerForm({
       const finalUrl = await verifyEvccServer({
         url: cleanUrl,
         basicAuth: internalServer?.basicAuth || {},
+        clientCert: internalServer?.clientCert,
       });
 
-      const server = {
+      const server: Server = {
         title: internalServer?.title,
         url: finalUrl,
         basicAuth: internalServer?.basicAuth || {},
       };
 
+      if (internalServer?.clientCert && certBase64) {
+        try {
+          NativeClientCertModule.setCertificate(certBase64, certPassword);
+        } catch (e) {
+          throw new Error(t("servers.manually.clientCertNote") + " (Password invalid?)");
+        }
+        const key = "cert_" + Date.now();
+        await storeCert(key, certBase64, certPassword);
+        server.clientCert = {
+          label: certLabel || "Certificate",
+          secureStoreKey: key,
+        };
+      } else if (internalServer?.clientCert?.secureStoreKey) {
+        // keep existing cert during update
+        server.clientCert = internalServer.clientCert;
+      }
+
       const sameServerCount = servers.filter((s) =>
         sameServer(server, s),
       ).length;
@@ -183,6 +253,62 @@ export default function ServerForm({
         </>
       )}
 
+      <CheckBox
+        style={{ marginTop: 8, marginBottom: 16 }}
+        checked={!!internalServer?.clientCert}
+        onChange={toggleClientCert}
+        testID="serverFormClientCert"
+      >
+        {t("servers.manually.clientCertRequired")}
+      </CheckBox>
+
+      {!!internalServer?.clientCert && (
+        <>
+          <Button
+            style={{ marginTop: 8, marginBottom: certLabel ? 4 : 16 }}
+            appearance={certLabel ? "filled" : "outline"}
+            status={certLabel ? "success" : "basic"}
+            onPress={pickCertificate}
+          >
+            {certLabel
+              ? `✓ ${certLabel}`
+              : internalServer?.clientCert?.label
+              ? `✓ ${internalServer.clientCert.label}`
+              : t("servers.manually.clientCertSelect")}
+          </Button>
+
+          {certLabel && (
+            <Text style={{ marginBottom: 12 }} category="c1" appearance="hint">
+              {t("servers.manually.clientCertNote")}
+            </Text>
+          )}
+
+          {!!certBase64 && (
+            <Input
+              style={{ marginTop: 4, marginBottom: 16 }}
+              size="large"
+              status="basic"
+              onChangeText={setCertPassword}
+              value={certPassword}
+              inputMode="text"
+              keyboardType="default"
+              autoCapitalize="none"
+              returnKeyType="go"
+              autoCorrect={false}
+              placeholder={t("servers.manually.clientCertPassword")}
+              secureTextEntry
+              onSubmitEditing={validateAndSaveURL}
+            />
+          )}
+
+          {!certLabel && !!internalServer?.clientCert && (
+            <Text style={{ marginTop: 4, marginBottom: 16 }} category="c1" appearance="hint">
+              {t("servers.manually.clientCertNote")}
+            </Text>
+          )}
+        </>
+      )}
+
       <Button
         style={{ marginTop: 16, marginBottom: 16 }}
         appearance="filled"
diff --git a/i18n/de.json b/i18n/de.json
index 0aee82e9..287afec8 100644
--- a/i18n/de.json
+++ b/i18n/de.json
@@ -30,7 +30,11 @@
         "scanning": "erkennen..."
       },
       "title": "Titel",
-      "serverExistsAlready": "Dieser Server existiert bereits."
+      "serverExistsAlready": "Dieser Server existiert bereits.",
+      "clientCertRequired": "Client-Zertifikat verwenden",
+      "clientCertSelect": "Zertifikat auswählen (.p12)",
+      "clientCertPassword": "Zertifikat-Passwort",
+      "clientCertNote": "Das Zertifikat wird beim Verbindungsaufbau verwendet. Die Prüfung beim Speichern wird übersprungen."
     },
     "removeServer": "Server entfernen",
     "search": {
diff --git a/i18n/en.json b/i18n/en.json
index a56fdcc7..9302d5dc 100644
--- a/i18n/en.json
+++ b/i18n/en.json
@@ -30,7 +30,11 @@
         "scanning": "detecting..."
       },
       "title": "Title",
-      "serverExistsAlready": "This server already exists."
+      "serverExistsAlready": "This server already exists.",
+      "clientCertRequired": "Use client certificate",
+      "clientCertSelect": "Select certificate (.p12)",
+      "clientCertPassword": "Certificate password",
+      "clientCertNote": "The certificate will be used when connecting to the server. Verification is skipped."
     },
     "removeServer": "Remove server",
     "search": {
diff --git a/package-lock.json b/package-lock.json
index 40e2a53c..2eb701c9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -21,14 +21,17 @@
         "@ui-kitten/components": "^5.3.1",
         "axios": "^1.16.0",
         "base-64": "^1.0.0",
+        "client-cert": "file:./modules/client-cert",
         "expo": "~56.0.11",
         "expo-build-properties": "~56.0.18",
         "expo-camera": "~56.0.8",
         "expo-dev-client": "~56.0.20",
+        "expo-document-picker": "~56.0.0",
         "expo-file-system": "~56.0.7",
         "expo-haptics": "~56.0.3",
         "expo-linking": "~56.0.14",
         "expo-localization": "~56.0.6",
+        "expo-secure-store": "~56.0.0",
         "expo-sharing": "~56.0.17",
         "expo-splash-screen": "~56.0.10",
         "expo-status-bar": "~56.0.4",
@@ -74,6 +77,13 @@
         "typescript": "^6.0.3"
       }
     },
+    "modules/client-cert": {
+      "version": "1.0.0",
+      "peerDependencies": {
+        "expo": "*",
+        "react": "*"
+      }
+    },
     "node_modules/@babel/code-frame": {
       "version": "7.29.7",
       "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.7.tgz",
@@ -6640,6 +6650,10 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/client-cert": {
+      "resolved": "modules/client-cert",
+      "link": true
+    },
     "node_modules/cliui": {
       "version": "8.0.1",
       "resolved": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz",
@@ -8497,6 +8511,15 @@
         "expo": "*"
       }
     },
+    "node_modules/expo-document-picker": {
+      "version": "56.0.4",
+      "resolved": "https://registry.npmjs.org/expo-document-picker/-/expo-document-picker-56.0.4.tgz",
+      "integrity": "sha512-75Apf74XNkYYohObIH19VZw42xpe0gmEnPccuzGXKVAzlvTYCfibSgW17F+6vt4paOfZEnAoZ1QFZM6dmaujRA==",
+      "license": "MIT",
+      "peerDependencies": {
+        "expo": "*"
+      }
+    },
     "node_modules/expo-file-system": {
       "version": "56.0.8",
       "resolved": "https://registry.npmjs.org/expo-file-system/-/expo-file-system-56.0.8.tgz",
@@ -8630,6 +8653,15 @@
         "react-native": "*"
       }
     },
+    "node_modules/expo-secure-store": {
+      "version": "56.0.4",
+      "resolved": "https://registry.npmjs.org/expo-secure-store/-/expo-secure-store-56.0.4.tgz",
+      "integrity": "sha512-hjEi/gmpdFFJ9lYbdp3k3p/WchV7Gi0Qt8jt/m/0WJadqQrskafHAlDxbZkII1cN3Yd7zp9Lvkeq3UfGhSwirQ==",
+      "license": "MIT",
+      "peerDependencies": {
+        "expo": "*"
+      }
+    },
     "node_modules/expo-server": {
       "version": "56.0.5",
       "resolved": "https://registry.npmjs.org/expo-server/-/expo-server-56.0.5.tgz",
diff --git a/package.json b/package.json
index 877e0a4e..5f5675d5 100644
--- a/package.json
+++ b/package.json
@@ -37,10 +37,12 @@
     "expo-build-properties": "~56.0.18",
     "expo-camera": "~56.0.8",
     "expo-dev-client": "~56.0.20",
+    "expo-document-picker": "~56.0.0",
     "expo-file-system": "~56.0.7",
     "expo-haptics": "~56.0.3",
     "expo-linking": "~56.0.14",
     "expo-localization": "~56.0.6",
+    "expo-secure-store": "~56.0.0",
     "expo-sharing": "~56.0.17",
     "expo-splash-screen": "~56.0.10",
     "expo-status-bar": "~56.0.4",
diff --git a/screens/MainScreen.tsx b/screens/MainScreen.tsx
index c6a587c5..42fcf0e4 100644
--- a/screens/MainScreen.tsx
+++ b/screens/MainScreen.tsx
@@ -27,6 +27,8 @@ import { shareFileFromUrl } from "utils/shareFile";
 import { useSafeAreaInsets } from "react-native-safe-area-context";
 import Spinner from "components/animations/Spinner";
 import { testingEnvironment } from "helper/launchArguments";
+import NativeClientCertModule from "modules/test-module/src/TestModule";
+import { loadCert } from "utils/certStorage";
 
 export default function MainScreen({
   navigation,
@@ -65,6 +67,25 @@ export default function MainScreen({
     }
   }, [targetPath, isConnected, clearTargetPath]);
 
+  useEffect(() => {
+    (async () => {
+      if (activeServer?.clientCert) {
+        try {
+          const cert = await loadCert(activeServer.clientCert.secureStoreKey);
+          if (cert) {
+            NativeClientCertModule.setCertificate(cert.p12Base64, cert.password);
+          } else {
+            console.warn("Client cert not found in secure store");
+          }
+        } catch (e) {
+          console.error("Failed to load client cert", e);
+        }
+      } else {
+        NativeClientCertModule.clearCertificate();
+      }
+    })();
+  }, [activeServer]);
+
   // Reconnect if connection is lost
   useEffect(() => {
     let intervalId: NodeJS.Timeout | undefined;
diff --git a/types.ts b/types.ts
index c4fc3b1b..54a0dd48 100644
--- a/types.ts
+++ b/types.ts
@@ -1,9 +1,15 @@
 import { NavigatorScreenParams } from "@react-navigation/native";
 
+export interface ClientCert {
+  label: string;
+  secureStoreKey: string;
+}
+
 export interface Server {
   title?: string;
   url: string;
   basicAuth: BasicAuth;
+  clientCert?: ClientCert;
 }
 
 export interface BasicAuth {
diff --git a/utils/server.ts b/utils/server.ts
index 060c6204..13d9216d 100644
--- a/utils/server.ts
+++ b/utils/server.ts
@@ -20,6 +20,12 @@ export function cleanServerUrl(url: string) {
 }
 
 export async function verifyEvccServer(server: Server) {
+  if (server.clientCert) {
+    // We cannot verify mTLS connections using plain axios easily.
+    // Skip verification and assume it works; it will be tested when the WebView loads.
+    return cleanServerUrl(server.url);
+  }
+
   const options: AxiosRequestConfig = { ...AXIOS_OPTIONS };
   if (server.basicAuth) {
     const { username, password } = server.basicAuth;

From 206faf5de2643a1b8d87363d8d0c16ba385717dd Mon Sep 17 00:00:00 2001
From: deep2web <88986286+deep2web@users.noreply.github.com>
Date: Sat, 25 Jul 2026 20:10:13 +0200
Subject: [PATCH 02/10] fix: add missing mTLS native modules and webview patch

---
 modules/test-module/LICENSE                   |  21 +++
 modules/test-module/android/build.gradle      |  18 +++
 .../android/src/main/AndroidManifest.xml      |   2 +
 .../modules/testmodule/ClientCertStore.kt     |  40 +++++
 .../expo/modules/testmodule/TestModule.kt     |  94 ++++++++++++
 modules/test-module/expo-module.config.json   |   9 ++
 modules/test-module/ios/TestModule.podspec    |  23 +++
 modules/test-module/ios/TestModule.swift      |   7 +
 modules/test-module/src/TestModule.ts         |   3 +
 modules/test-module/src/TestModule.types.ts   |   1 +
 modules/test-module/src/TestModule.web.ts     |   5 +
 package-lock.json                             | 139 +++++++++++++++++-
 package.json                                  |   2 +
 patches/react-native-webview+13.16.1.patch    |  35 +++++
 utils/certStorage.ts                          |  21 +++
 15 files changed, 415 insertions(+), 5 deletions(-)
 create mode 100644 modules/test-module/LICENSE
 create mode 100644 modules/test-module/android/build.gradle
 create mode 100644 modules/test-module/android/src/main/AndroidManifest.xml
 create mode 100644 modules/test-module/android/src/main/java/expo/modules/testmodule/ClientCertStore.kt
 create mode 100644 modules/test-module/android/src/main/java/expo/modules/testmodule/TestModule.kt
 create mode 100644 modules/test-module/expo-module.config.json
 create mode 100644 modules/test-module/ios/TestModule.podspec
 create mode 100644 modules/test-module/ios/TestModule.swift
 create mode 100644 modules/test-module/src/TestModule.ts
 create mode 100644 modules/test-module/src/TestModule.types.ts
 create mode 100644 modules/test-module/src/TestModule.web.ts
 create mode 100644 patches/react-native-webview+13.16.1.patch
 create mode 100644 utils/certStorage.ts

diff --git a/modules/test-module/LICENSE b/modules/test-module/LICENSE
new file mode 100644
index 00000000..30b20e3b
--- /dev/null
+++ b/modules/test-module/LICENSE
@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2015-present 650 Industries, Inc. (aka Expo)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/modules/test-module/android/build.gradle b/modules/test-module/android/build.gradle
new file mode 100644
index 00000000..541f9cb7
--- /dev/null
+++ b/modules/test-module/android/build.gradle
@@ -0,0 +1,18 @@
+plugins {
+  id 'com.android.library'
+  id 'expo-module-gradle-plugin'
+}
+
+group = 'expo.modules.testmodule'
+version = '0.1.0'
+
+android {
+  namespace "expo.modules.testmodule"
+  defaultConfig {
+    versionCode 1
+    versionName "0.1.0"
+  }
+  lintOptions {
+    abortOnError false
+  }
+}
diff --git a/modules/test-module/android/src/main/AndroidManifest.xml b/modules/test-module/android/src/main/AndroidManifest.xml
new file mode 100644
index 00000000..bdae66c8
--- /dev/null
+++ b/modules/test-module/android/src/main/AndroidManifest.xml
@@ -0,0 +1,2 @@
+<manifest>
+</manifest>
diff --git a/modules/test-module/android/src/main/java/expo/modules/testmodule/ClientCertStore.kt b/modules/test-module/android/src/main/java/expo/modules/testmodule/ClientCertStore.kt
new file mode 100644
index 00000000..b91bf255
--- /dev/null
+++ b/modules/test-module/android/src/main/java/expo/modules/testmodule/ClientCertStore.kt
@@ -0,0 +1,40 @@
+package expo.modules.testmodule
+
+import java.security.KeyStore
+import java.security.PrivateKey
+import java.security.cert.X509Certificate
+
+object ClientCertStore {
+    private var privateKey: PrivateKey? = null
+    private var certificateChain: Array<X509Certificate>? = null
+
+    @JvmStatic
+    fun getPrivateKey(): PrivateKey? = privateKey
+
+    @JvmStatic
+    fun getCertificateChain(): Array<X509Certificate>? = certificateChain
+
+    fun setCert(p12Base64: String, pass: String) {
+        try {
+            val bytes = android.util.Base64.decode(p12Base64, android.util.Base64.DEFAULT)
+            val ks = KeyStore.getInstance("PKCS12")
+            ks.load(java.io.ByteArrayInputStream(bytes), pass.toCharArray())
+            val aliases = ks.aliases()
+            if (aliases.hasMoreElements()) {
+                val alias = aliases.nextElement()
+                privateKey = ks.getKey(alias, pass.toCharArray()) as PrivateKey
+                val certs = ks.getCertificateChain(alias)
+                certificateChain = certs?.map { it as X509Certificate }?.toTypedArray()
+            }
+        } catch (e: Exception) {
+            e.printStackTrace()
+            clear()
+            throw e
+        }
+    }
+
+    fun clear() {
+        privateKey = null
+        certificateChain = null
+    }
+}
diff --git a/modules/test-module/android/src/main/java/expo/modules/testmodule/TestModule.kt b/modules/test-module/android/src/main/java/expo/modules/testmodule/TestModule.kt
new file mode 100644
index 00000000..a90972e0
--- /dev/null
+++ b/modules/test-module/android/src/main/java/expo/modules/testmodule/TestModule.kt
@@ -0,0 +1,94 @@
+package expo.modules.testmodule
+
+import android.webkit.ClientCertRequest
+import android.webkit.WebView
+import android.webkit.WebViewClient
+import expo.modules.kotlin.modules.Module
+import expo.modules.kotlin.modules.ModuleDefinition
+
+class TestModule : Module() {
+  override fun definition() = ModuleDefinition {
+    Name("ClientCert")
+
+    Function("setCertificate") { p12Base64: String, pass: String ->
+      ClientCertStore.setCert(p12Base64, pass)
+      installClientCertHandlerIfNeeded()
+    }
+
+    Function("clearCertificate") {
+      ClientCertStore.clear()
+    }
+  }
+
+  private fun installClientCertHandlerIfNeeded() {
+    val activity = appContext.currentActivity ?: return
+    activity.runOnUiThread {
+      // Walk the view hierarchy and patch every WebView we find
+      val rootView = activity.window.decorView
+      patchWebViews(rootView)
+    }
+  }
+
+  private fun patchWebViews(view: android.view.View) {
+    if (view is WebView) {
+      // Only install once – check the current client type
+      val existing = view.tag as? Boolean
+      if (existing != true) {
+        view.tag = true
+        val originalClient = view.webViewClient
+        view.webViewClient = object : WebViewClient() {
+          override fun onReceivedClientCertRequest(
+            view: WebView,
+            request: ClientCertRequest
+          ) {
+            val key = ClientCertStore.getPrivateKey()
+            val chain = ClientCertStore.getCertificateChain()
+            if (key != null && chain != null) {
+              request.proceed(key, chain)
+            } else {
+              request.cancel()
+            }
+          }
+
+          // Forward all other methods to original client
+          override fun shouldOverrideUrlLoading(
+            view: WebView,
+            url: String
+          ) = originalClient.shouldOverrideUrlLoading(view, url)
+
+          override fun onPageStarted(
+            view: WebView,
+            url: String,
+            favicon: android.graphics.Bitmap?
+          ) = originalClient.onPageStarted(view, url, favicon)
+
+          override fun onPageFinished(view: WebView, url: String) =
+            originalClient.onPageFinished(view, url)
+
+          override fun onReceivedError(
+            view: WebView,
+            request: android.webkit.WebResourceRequest,
+            error: android.webkit.WebResourceError
+          ) = originalClient.onReceivedError(view, request, error)
+
+          override fun onReceivedHttpError(
+            view: WebView,
+            request: android.webkit.WebResourceRequest,
+            errorResponse: android.webkit.WebResourceResponse
+          ) = originalClient.onReceivedHttpError(view, request, errorResponse)
+
+          override fun onReceivedSslError(
+            view: WebView,
+            handler: android.webkit.SslErrorHandler,
+            error: android.net.http.SslError
+          ) = originalClient.onReceivedSslError(view, handler, error)
+        }
+      }
+    }
+    if (view is android.view.ViewGroup) {
+      for (i in 0 until view.childCount) {
+        patchWebViews(view.getChildAt(i))
+      }
+    }
+  }
+}
diff --git a/modules/test-module/expo-module.config.json b/modules/test-module/expo-module.config.json
new file mode 100644
index 00000000..624c685c
--- /dev/null
+++ b/modules/test-module/expo-module.config.json
@@ -0,0 +1,9 @@
+{
+  "platforms": ["apple", "android", "web"],
+  "apple": {
+    "modules": ["TestModule"]
+  },
+  "android": {
+    "modules": ["expo.modules.testmodule.TestModule"]
+  }
+}
diff --git a/modules/test-module/ios/TestModule.podspec b/modules/test-module/ios/TestModule.podspec
new file mode 100644
index 00000000..f9525ae8
--- /dev/null
+++ b/modules/test-module/ios/TestModule.podspec
@@ -0,0 +1,23 @@
+Pod::Spec.new do |s|
+  s.name           = 'TestModule'
+  s.version        = '1.0.0'
+  s.summary        = 'A sample project summary'
+  s.description    = 'A sample project description'
+  s.author         = ''
+  s.homepage       = 'https://docs.expo.dev/modules/'
+  s.platforms      = {
+    :ios => '16.4',
+    :tvos => '16.4'
+  }
+  s.source         = { git: '' }
+  s.static_framework = true
+
+  s.dependency 'ExpoModulesCore'
+
+  # Swift/Objective-C compatibility
+  s.pod_target_xcconfig = {
+    'DEFINES_MODULE' => 'YES',
+  }
+
+  s.source_files = "**/*.{h,m,mm,swift,hpp,cpp}"
+end
diff --git a/modules/test-module/ios/TestModule.swift b/modules/test-module/ios/TestModule.swift
new file mode 100644
index 00000000..900fca36
--- /dev/null
+++ b/modules/test-module/ios/TestModule.swift
@@ -0,0 +1,7 @@
+import ExpoModulesCore
+
+public class TestModule: Module {
+  public func definition() -> ModuleDefinition {
+    Name("TestModule")
+  }
+}
diff --git a/modules/test-module/src/TestModule.ts b/modules/test-module/src/TestModule.ts
new file mode 100644
index 00000000..fcd4e806
--- /dev/null
+++ b/modules/test-module/src/TestModule.ts
@@ -0,0 +1,3 @@
+import { requireNativeModule } from 'expo-modules-core';
+
+export default requireNativeModule('ClientCert');
diff --git a/modules/test-module/src/TestModule.types.ts b/modules/test-module/src/TestModule.types.ts
new file mode 100644
index 00000000..d5ed3238
--- /dev/null
+++ b/modules/test-module/src/TestModule.types.ts
@@ -0,0 +1 @@
+// Define your exported module types here.
diff --git a/modules/test-module/src/TestModule.web.ts b/modules/test-module/src/TestModule.web.ts
new file mode 100644
index 00000000..f2a645f1
--- /dev/null
+++ b/modules/test-module/src/TestModule.web.ts
@@ -0,0 +1,5 @@
+import { registerWebModule, NativeModule } from 'expo';
+
+class TestModule extends NativeModule<{}> {}
+
+export default registerWebModule(TestModule, 'TestModule');
diff --git a/package-lock.json b/package-lock.json
index 2eb701c9..c05f5f16 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -21,7 +21,6 @@
         "@ui-kitten/components": "^5.3.1",
         "axios": "^1.16.0",
         "base-64": "^1.0.0",
-        "client-cert": "file:./modules/client-cert",
         "expo": "~56.0.11",
         "expo-build-properties": "~56.0.18",
         "expo-camera": "~56.0.8",
@@ -69,6 +68,7 @@
         "eslint-plugin-react": "^7.33.2",
         "eslint-plugin-react-native": "^5.0.0",
         "jest": "^30.4.2",
+        "patch-package": "^8.0.1",
         "prettier": "^3.7.4",
         "react-native-launch-arguments": "^4.1.1",
         "ts-jest": "^29.4.6",
@@ -79,6 +79,7 @@
     },
     "modules/client-cert": {
       "version": "1.0.0",
+      "extraneous": true,
       "peerDependencies": {
         "expo": "*",
         "react": "*"
@@ -5570,6 +5571,13 @@
         "node": ">=10.0.0"
       }
     },
+    "node_modules/@yarnpkg/lockfile": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@yarnpkg/lockfile/-/lockfile-1.1.0.tgz",
+      "integrity": "sha512-GpSwvyXOcOOlV70vbnzjj4fW5xW/FdUF6nQEt1ENy7m4ZCczi1+/buVUPAqmGfqznsORNFzUMjctTIp8a9tuCQ==",
+      "dev": true,
+      "license": "BSD-2-Clause"
+    },
     "node_modules/abort-controller": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/abort-controller/-/abort-controller-3.0.0.tgz",
@@ -6650,10 +6658,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/client-cert": {
-      "resolved": "modules/client-cert",
-      "link": true
-    },
     "node_modules/cliui": {
       "version": "8.0.1",
       "resolved": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz",
@@ -8993,6 +8997,16 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/find-yarn-workspace-root": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/find-yarn-workspace-root/-/find-yarn-workspace-root-2.0.0.tgz",
+      "integrity": "sha512-1IMnbjt4KzsQfnhnzNd8wUEgXZ44IzZaZmnLYx7D5FZlaHt2gW20Cri8Q+E/t5tIj4+epTBub+2Zxu/vNILzqQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "micromatch": "^4.0.2"
+      }
+    },
     "node_modules/flat": {
       "version": "5.0.2",
       "resolved": "https://registry.npmjs.org/flat/-/flat-5.0.2.tgz",
@@ -11668,6 +11682,26 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/json-stable-stringify": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-1.3.0.tgz",
+      "integrity": "sha512-qtYiSSFlwot9XHtF9bD9c7rwKjr+RecWT//ZnPvSmEjpV5mmPOCN4j8UjY5hbjNkOwZ/jQv3J6R1/pL7RwgMsg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "call-bind": "^1.0.8",
+        "call-bound": "^1.0.4",
+        "isarray": "^2.0.5",
+        "jsonify": "^0.0.1",
+        "object-keys": "^1.1.1"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/json-stable-stringify-without-jsonify": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz",
@@ -11675,6 +11709,13 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/json-stable-stringify/node_modules/isarray": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/isarray/-/isarray-2.0.5.tgz",
+      "integrity": "sha512-xHjhDr3cNBK0BzdUJSPXZntQUx/mwMS5Rw4A7lPJ90XGAO6ISP/ePDNuo0vhqOZU+UD5JoodwCAAoZQd3FeAKw==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/json5": {
       "version": "2.2.3",
       "resolved": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz",
@@ -11700,6 +11741,16 @@
         "graceful-fs": "^4.1.6"
       }
     },
+    "node_modules/jsonify": {
+      "version": "0.0.1",
+      "resolved": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.1.tgz",
+      "integrity": "sha512-2/Ki0GcmuqSrgFyelQq9M05y7PS0mEwuIzrf3f1fPqkVDVRvZrPZtVSMHxdgo8Aq0sxAOb/cr2aqqA3LeWHVPg==",
+      "dev": true,
+      "license": "Public Domain",
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/jsx-ast-utils": {
       "version": "3.3.5",
       "resolved": "https://registry.npmjs.org/jsx-ast-utils/-/jsx-ast-utils-3.3.5.tgz",
@@ -11726,6 +11777,16 @@
         "json-buffer": "3.0.1"
       }
     },
+    "node_modules/klaw-sync": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/klaw-sync/-/klaw-sync-6.0.0.tgz",
+      "integrity": "sha512-nIeuVSzdCCs6TDPTqI8w1Yre34sSq7AkZ4B3sfOBbI2CgVSB4Du4aLQijFU2+lhAFCwt9+42Hel6lQNIv6AntQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.1.11"
+      }
+    },
     "node_modules/kleur": {
       "version": "3.0.3",
       "resolved": "https://registry.npmjs.org/kleur/-/kleur-3.0.3.tgz",
@@ -13636,6 +13697,74 @@
         "node": ">= 0.8"
       }
     },
+    "node_modules/patch-package": {
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/patch-package/-/patch-package-8.0.1.tgz",
+      "integrity": "sha512-VsKRIA8f5uqHQ7NGhwIna6Bx6D9s/1iXlA1hthBVBEbkq+t4kXD0HHt+rJhf/Z+Ci0F/HCB2hvn0qLdLG+Qxlw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@yarnpkg/lockfile": "^1.1.0",
+        "chalk": "^4.1.2",
+        "ci-info": "^3.7.0",
+        "cross-spawn": "^7.0.3",
+        "find-yarn-workspace-root": "^2.0.0",
+        "fs-extra": "^10.0.0",
+        "json-stable-stringify": "^1.0.2",
+        "klaw-sync": "^6.0.0",
+        "minimist": "^1.2.6",
+        "open": "^7.4.2",
+        "semver": "^7.5.3",
+        "slash": "^2.0.0",
+        "tmp": "^0.2.4",
+        "yaml": "^2.2.2"
+      },
+      "bin": {
+        "patch-package": "index.js"
+      },
+      "engines": {
+        "node": ">=14",
+        "npm": ">5"
+      }
+    },
+    "node_modules/patch-package/node_modules/fs-extra": {
+      "version": "10.1.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz",
+      "integrity": "sha512-oRXApq54ETRj4eMiFzGnHWGy+zo5raudjuxN0b8H7s/RU2oW0Wvsx9O0ACRN/kRq9E8Vu/ReskGB5o3ji+FzHQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.2.0",
+        "jsonfile": "^6.0.1",
+        "universalify": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/patch-package/node_modules/semver": {
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/patch-package/node_modules/slash": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/slash/-/slash-2.0.0.tgz",
+      "integrity": "sha512-ZYKh3Wh2z1PpEXWr0MpSBZ0V6mZHAQfYevttO11c51CaWjGTaadiKZ+wVt1PbMlDV5qhMFslpZCemhwOK7C89A==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/path-dirname": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/path-dirname/-/path-dirname-1.0.2.tgz",
diff --git a/package.json b/package.json
index 5f5675d5..1122dc64 100644
--- a/package.json
+++ b/package.json
@@ -3,6 +3,7 @@
   "version": "1.4.0",
   "main": "node_modules/expo/AppEntry.js",
   "scripts": {
+    "postinstall": "patch-package",
     "start": "expo start",
     "android": "expo run:android",
     "ios": "expo run:ios",
@@ -80,6 +81,7 @@
     "eslint-plugin-react": "^7.33.2",
     "eslint-plugin-react-native": "^5.0.0",
     "jest": "^30.4.2",
+    "patch-package": "^8.0.1",
     "prettier": "^3.7.4",
     "react-native-launch-arguments": "^4.1.1",
     "ts-jest": "^29.4.6",
diff --git a/patches/react-native-webview+13.16.1.patch b/patches/react-native-webview+13.16.1.patch
new file mode 100644
index 00000000..157ef027
--- /dev/null
+++ b/patches/react-native-webview+13.16.1.patch
@@ -0,0 +1,35 @@
+diff --git a/node_modules/react-native-webview/android/src/main/java/com/reactnativecommunity/webview/RNCWebViewClient.java b/node_modules/react-native-webview/android/src/main/java/com/reactnativecommunity/webview/RNCWebViewClient.java
+index 0287e1c..e781a44 100644
+--- a/node_modules/react-native-webview/android/src/main/java/com/reactnativecommunity/webview/RNCWebViewClient.java
++++ b/node_modules/react-native-webview/android/src/main/java/com/reactnativecommunity/webview/RNCWebViewClient.java
+@@ -10,6 +10,7 @@ import android.webkit.HttpAuthHandler;
+ import android.webkit.RenderProcessGoneDetail;
+ import android.webkit.SslErrorHandler;
+ import android.webkit.WebResourceRequest;
++import android.webkit.ClientCertRequest;
+ import android.webkit.WebResourceResponse;
+ import android.webkit.WebView;
+ import android.webkit.WebViewClient;
+@@ -327,4 +328,22 @@ public class RNCWebViewClient extends WebViewClient {
+     public void setProgressChangedFilter(RNCWebView.ProgressChangedFilter filter) {
+         progressChangedFilter = filter;
+     }
++
++  @Override
++  public void onReceivedClientCertRequest(WebView view, ClientCertRequest request) {
++    try {
++        Class<?> clazz = Class.forName("expo.modules.testmodule.ClientCertStore");
++        java.security.PrivateKey key = (java.security.PrivateKey) clazz.getMethod("getPrivateKey").invoke(null);
++        java.security.cert.X509Certificate[] chain = (java.security.cert.X509Certificate[]) clazz.getMethod("getCertificateChain").invoke(null);
++        
++        if (key != null && chain != null) {
++            request.proceed(key, chain);
++            return;
++        }
++    } catch (Exception e) {
++        android.util.Log.e("ClientCertPatch", "Error loading client cert", e);
++    }
++    super.onReceivedClientCertRequest(view, request);
++  }
++
+ }
diff --git a/utils/certStorage.ts b/utils/certStorage.ts
new file mode 100644
index 00000000..92c5938c
--- /dev/null
+++ b/utils/certStorage.ts
@@ -0,0 +1,21 @@
+import * as SecureStore from "expo-secure-store";
+
+export async function storeCert(key: string, p12Base64: string, password: string) {
+  await SecureStore.setItemAsync(key, p12Base64);
+  await SecureStore.setItemAsync(`${key}_pass`, password);
+}
+
+export async function loadCert(key: string): Promise<{ p12Base64: string; password: string } | null> {
+  const p12Base64 = await SecureStore.getItemAsync(key);
+  const password = await SecureStore.getItemAsync(`${key}_pass`);
+  
+  if (p12Base64 && password !== null) {
+    return { p12Base64, password };
+  }
+  return null;
+}
+
+export async function deleteCert(key: string) {
+  await SecureStore.deleteItemAsync(key);
+  await SecureStore.deleteItemAsync(`${key}_pass`);
+}

From 06d843d5d91635e0453921db59ca4943fbdebab3 Mon Sep 17 00:00:00 2001
From: deep2web <88986286+deep2web@users.noreply.github.com>
Date: Sat, 25 Jul 2026 20:17:28 +0200
Subject: [PATCH 03/10] refactor: rename test-module to client-cert module

---
 components/ServerForm.tsx                                | 2 +-
 modules/{test-module => client-cert}/LICENSE             | 0
 .../{test-module => client-cert}/android/build.gradle    | 4 ++--
 .../android/src/main/AndroidManifest.xml                 | 0
 .../java/expo/modules/clientcert/ClientCertModule.kt}    | 4 ++--
 .../java/expo/modules/clientcert}/ClientCertStore.kt     | 2 +-
 modules/client-cert/expo-module.config.json              | 9 +++++++++
 .../ios/ClientCertModule.podspec}                        | 0
 .../ios/ClientCertModule.swift}                          | 0
 .../src/ClientCertModule.ts}                             | 0
 .../src/ClientCertModule.types.ts}                       | 0
 modules/client-cert/src/ClientCertModule.web.ts          | 5 +++++
 modules/test-module/expo-module.config.json              | 9 ---------
 modules/test-module/src/TestModule.web.ts                | 5 -----
 patches/react-native-webview+13.16.1.patch               | 4 ++--
 screens/MainScreen.tsx                                   | 2 +-
 16 files changed, 23 insertions(+), 23 deletions(-)
 rename modules/{test-module => client-cert}/LICENSE (100%)
 rename modules/{test-module => client-cert}/android/build.gradle (74%)
 rename modules/{test-module => client-cert}/android/src/main/AndroidManifest.xml (100%)
 rename modules/{test-module/android/src/main/java/expo/modules/testmodule/TestModule.kt => client-cert/android/src/main/java/expo/modules/clientcert/ClientCertModule.kt} (97%)
 rename modules/{test-module/android/src/main/java/expo/modules/testmodule => client-cert/android/src/main/java/expo/modules/clientcert}/ClientCertStore.kt (97%)
 create mode 100644 modules/client-cert/expo-module.config.json
 rename modules/{test-module/ios/TestModule.podspec => client-cert/ios/ClientCertModule.podspec} (100%)
 rename modules/{test-module/ios/TestModule.swift => client-cert/ios/ClientCertModule.swift} (100%)
 rename modules/{test-module/src/TestModule.ts => client-cert/src/ClientCertModule.ts} (100%)
 rename modules/{test-module/src/TestModule.types.ts => client-cert/src/ClientCertModule.types.ts} (100%)
 create mode 100644 modules/client-cert/src/ClientCertModule.web.ts
 delete mode 100644 modules/test-module/expo-module.config.json
 delete mode 100644 modules/test-module/src/TestModule.web.ts

diff --git a/components/ServerForm.tsx b/components/ServerForm.tsx
index c1926c69..9f970894 100644
--- a/components/ServerForm.tsx
+++ b/components/ServerForm.tsx
@@ -9,7 +9,7 @@ import ScanQRCodeButton from "./ScanQRCodeButton";
 import * as DocumentPicker from "expo-document-picker";
 import * as FileSystem from "expo-file-system/legacy";
 import { storeCert } from "../utils/certStorage";
-import NativeClientCertModule from "../modules/test-module/src/TestModule";
+import NativeClientCertModule from "../modules/client-cert/src/ClientCertModule";
 
 interface ServerFormProps {
   server: Server | undefined;
diff --git a/modules/test-module/LICENSE b/modules/client-cert/LICENSE
similarity index 100%
rename from modules/test-module/LICENSE
rename to modules/client-cert/LICENSE
diff --git a/modules/test-module/android/build.gradle b/modules/client-cert/android/build.gradle
similarity index 74%
rename from modules/test-module/android/build.gradle
rename to modules/client-cert/android/build.gradle
index 541f9cb7..60329273 100644
--- a/modules/test-module/android/build.gradle
+++ b/modules/client-cert/android/build.gradle
@@ -3,11 +3,11 @@ plugins {
   id 'expo-module-gradle-plugin'
 }
 
-group = 'expo.modules.testmodule'
+group = 'expo.modules.clientcert'
 version = '0.1.0'
 
 android {
-  namespace "expo.modules.testmodule"
+  namespace "expo.modules.clientcert"
   defaultConfig {
     versionCode 1
     versionName "0.1.0"
diff --git a/modules/test-module/android/src/main/AndroidManifest.xml b/modules/client-cert/android/src/main/AndroidManifest.xml
similarity index 100%
rename from modules/test-module/android/src/main/AndroidManifest.xml
rename to modules/client-cert/android/src/main/AndroidManifest.xml
diff --git a/modules/test-module/android/src/main/java/expo/modules/testmodule/TestModule.kt b/modules/client-cert/android/src/main/java/expo/modules/clientcert/ClientCertModule.kt
similarity index 97%
rename from modules/test-module/android/src/main/java/expo/modules/testmodule/TestModule.kt
rename to modules/client-cert/android/src/main/java/expo/modules/clientcert/ClientCertModule.kt
index a90972e0..9345b81a 100644
--- a/modules/test-module/android/src/main/java/expo/modules/testmodule/TestModule.kt
+++ b/modules/client-cert/android/src/main/java/expo/modules/clientcert/ClientCertModule.kt
@@ -1,4 +1,4 @@
-package expo.modules.testmodule
+package expo.modules.clientcert
 
 import android.webkit.ClientCertRequest
 import android.webkit.WebView
@@ -6,7 +6,7 @@ import android.webkit.WebViewClient
 import expo.modules.kotlin.modules.Module
 import expo.modules.kotlin.modules.ModuleDefinition
 
-class TestModule : Module() {
+class ClientCertModule : Module() {
   override fun definition() = ModuleDefinition {
     Name("ClientCert")
 
diff --git a/modules/test-module/android/src/main/java/expo/modules/testmodule/ClientCertStore.kt b/modules/client-cert/android/src/main/java/expo/modules/clientcert/ClientCertStore.kt
similarity index 97%
rename from modules/test-module/android/src/main/java/expo/modules/testmodule/ClientCertStore.kt
rename to modules/client-cert/android/src/main/java/expo/modules/clientcert/ClientCertStore.kt
index b91bf255..083afd07 100644
--- a/modules/test-module/android/src/main/java/expo/modules/testmodule/ClientCertStore.kt
+++ b/modules/client-cert/android/src/main/java/expo/modules/clientcert/ClientCertStore.kt
@@ -1,4 +1,4 @@
-package expo.modules.testmodule
+package expo.modules.clientcert
 
 import java.security.KeyStore
 import java.security.PrivateKey
diff --git a/modules/client-cert/expo-module.config.json b/modules/client-cert/expo-module.config.json
new file mode 100644
index 00000000..63af2adc
--- /dev/null
+++ b/modules/client-cert/expo-module.config.json
@@ -0,0 +1,9 @@
+{
+  "platforms": ["apple", "android", "web"],
+  "apple": {
+    "modules": ["ClientCertModule"]
+  },
+  "android": {
+    "modules": ["expo.modules.clientcert.ClientCertModule"]
+  }
+}
diff --git a/modules/test-module/ios/TestModule.podspec b/modules/client-cert/ios/ClientCertModule.podspec
similarity index 100%
rename from modules/test-module/ios/TestModule.podspec
rename to modules/client-cert/ios/ClientCertModule.podspec
diff --git a/modules/test-module/ios/TestModule.swift b/modules/client-cert/ios/ClientCertModule.swift
similarity index 100%
rename from modules/test-module/ios/TestModule.swift
rename to modules/client-cert/ios/ClientCertModule.swift
diff --git a/modules/test-module/src/TestModule.ts b/modules/client-cert/src/ClientCertModule.ts
similarity index 100%
rename from modules/test-module/src/TestModule.ts
rename to modules/client-cert/src/ClientCertModule.ts
diff --git a/modules/test-module/src/TestModule.types.ts b/modules/client-cert/src/ClientCertModule.types.ts
similarity index 100%
rename from modules/test-module/src/TestModule.types.ts
rename to modules/client-cert/src/ClientCertModule.types.ts
diff --git a/modules/client-cert/src/ClientCertModule.web.ts b/modules/client-cert/src/ClientCertModule.web.ts
new file mode 100644
index 00000000..ca0bc680
--- /dev/null
+++ b/modules/client-cert/src/ClientCertModule.web.ts
@@ -0,0 +1,5 @@
+import { registerWebModule, NativeModule } from 'expo';
+
+class ClientCertModule extends NativeModule<{}> {}
+
+export default registerWebModule(ClientCertModule, 'ClientCertModule');
diff --git a/modules/test-module/expo-module.config.json b/modules/test-module/expo-module.config.json
deleted file mode 100644
index 624c685c..00000000
--- a/modules/test-module/expo-module.config.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-  "platforms": ["apple", "android", "web"],
-  "apple": {
-    "modules": ["TestModule"]
-  },
-  "android": {
-    "modules": ["expo.modules.testmodule.TestModule"]
-  }
-}
diff --git a/modules/test-module/src/TestModule.web.ts b/modules/test-module/src/TestModule.web.ts
deleted file mode 100644
index f2a645f1..00000000
--- a/modules/test-module/src/TestModule.web.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import { registerWebModule, NativeModule } from 'expo';
-
-class TestModule extends NativeModule<{}> {}
-
-export default registerWebModule(TestModule, 'TestModule');
diff --git a/patches/react-native-webview+13.16.1.patch b/patches/react-native-webview+13.16.1.patch
index 157ef027..c07d56b5 100644
--- a/patches/react-native-webview+13.16.1.patch
+++ b/patches/react-native-webview+13.16.1.patch
@@ -1,5 +1,5 @@
 diff --git a/node_modules/react-native-webview/android/src/main/java/com/reactnativecommunity/webview/RNCWebViewClient.java b/node_modules/react-native-webview/android/src/main/java/com/reactnativecommunity/webview/RNCWebViewClient.java
-index 0287e1c..e781a44 100644
+index 0287e1c..7835002 100644
 --- a/node_modules/react-native-webview/android/src/main/java/com/reactnativecommunity/webview/RNCWebViewClient.java
 +++ b/node_modules/react-native-webview/android/src/main/java/com/reactnativecommunity/webview/RNCWebViewClient.java
 @@ -10,6 +10,7 @@ import android.webkit.HttpAuthHandler;
@@ -18,7 +18,7 @@ index 0287e1c..e781a44 100644
 +  @Override
 +  public void onReceivedClientCertRequest(WebView view, ClientCertRequest request) {
 +    try {
-+        Class<?> clazz = Class.forName("expo.modules.testmodule.ClientCertStore");
++        Class<?> clazz = Class.forName("expo.modules.clientcert.ClientCertStore");
 +        java.security.PrivateKey key = (java.security.PrivateKey) clazz.getMethod("getPrivateKey").invoke(null);
 +        java.security.cert.X509Certificate[] chain = (java.security.cert.X509Certificate[]) clazz.getMethod("getCertificateChain").invoke(null);
 +        
diff --git a/screens/MainScreen.tsx b/screens/MainScreen.tsx
index 42fcf0e4..da57e3ed 100644
--- a/screens/MainScreen.tsx
+++ b/screens/MainScreen.tsx
@@ -27,7 +27,7 @@ import { shareFileFromUrl } from "utils/shareFile";
 import { useSafeAreaInsets } from "react-native-safe-area-context";
 import Spinner from "components/animations/Spinner";
 import { testingEnvironment } from "helper/launchArguments";
-import NativeClientCertModule from "modules/test-module/src/TestModule";
+import NativeClientCertModule from "modules/client-cert/src/ClientCertModule";
 import { loadCert } from "utils/certStorage";
 
 export default function MainScreen({

From 78e91e57507399f2e9ea94d03fbaeb728299cebe Mon Sep 17 00:00:00 2001
From: deep2web <88986286+deep2web@users.noreply.github.com>
Date: Sat, 25 Jul 2026 20:18:04 +0200
Subject: [PATCH 04/10] fix(lint): remove unused ClientCert import

---
 components/ServerForm.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/components/ServerForm.tsx b/components/ServerForm.tsx
index 9f970894..834c7c5f 100644
--- a/components/ServerForm.tsx
+++ b/components/ServerForm.tsx
@@ -3,7 +3,7 @@ import { Text, Button, Input, CheckBox } from "@ui-kitten/components";
 import { cleanServerUrl, sameServer, verifyEvccServer } from "../utils/server";
 import LoadingIndicator from "./animations/LoadingIndicator";
 import { useTranslation } from "react-i18next";
-import { BasicAuth, ClientCert, Server } from "types";
+import { BasicAuth, Server } from "types";
 import { useAppContext } from "./AppContext";
 import ScanQRCodeButton from "./ScanQRCodeButton";
 import * as DocumentPicker from "expo-document-picker";

From 136b05e6e55f5ecbe42e3b549c428b3e3ed524e7 Mon Sep 17 00:00:00 2001
From: deep2web <88986286+deep2web@users.noreply.github.com>
Date: Sat, 25 Jul 2026 20:18:19 +0200
Subject: [PATCH 05/10] fix(lint): fix unused catch variable and empty object
 type

---
 components/ServerForm.tsx                       | 2 +-
 modules/client-cert/src/ClientCertModule.web.ts | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/components/ServerForm.tsx b/components/ServerForm.tsx
index 834c7c5f..41606864 100644
--- a/components/ServerForm.tsx
+++ b/components/ServerForm.tsx
@@ -132,7 +132,7 @@ export default function ServerForm({
       if (internalServer?.clientCert && certBase64) {
         try {
           NativeClientCertModule.setCertificate(certBase64, certPassword);
-        } catch (e) {
+        } catch {
           throw new Error(t("servers.manually.clientCertNote") + " (Password invalid?)");
         }
         const key = "cert_" + Date.now();
diff --git a/modules/client-cert/src/ClientCertModule.web.ts b/modules/client-cert/src/ClientCertModule.web.ts
index ca0bc680..486be3f5 100644
--- a/modules/client-cert/src/ClientCertModule.web.ts
+++ b/modules/client-cert/src/ClientCertModule.web.ts
@@ -1,5 +1,5 @@
 import { registerWebModule, NativeModule } from 'expo';
 
-class ClientCertModule extends NativeModule<{}> {}
+class ClientCertModule extends NativeModule<Record<string, never>> {}
 
 export default registerWebModule(ClientCertModule, 'ClientCertModule');

From ee2efd12ba6215e5c4f90622e68f2b01316bc547 Mon Sep 17 00:00:00 2001
From: deep2web <88986286+deep2web@users.noreply.github.com>
Date: Sat, 25 Jul 2026 20:29:01 +0200
Subject: [PATCH 06/10] clean up to original code layout

---
 app.config.ts | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/app.config.ts b/app.config.ts
index 8225376e..7862bb08 100644
--- a/app.config.ts
+++ b/app.config.ts
@@ -66,7 +66,10 @@ export default ({ config }: ConfigContext) =>
       plugins: [
         "@bacons/apple-targets",
         ["./scripts/fdroid/configureFdroid.ts"],
-        ["./scripts/detox/configureDetox.ts", { subdomains: "*" }], // uncomment to debug app
+        [
+            "./scripts/detox/configureDetox.ts",
+            { subdomains: "*" }, // uncomment to debug app
+        ],
         ["./scripts/trustUserCAs.ts"],
         ["./scripts/withClientCertPatch.ts"],
         ["./scripts/increaseGradleMemory.ts"],

From 39ecb9b92b265b2b59b8c2f81331778ca048e26c Mon Sep 17 00:00:00 2001
From: deep2web <88986286+deep2web@users.noreply.github.com>
Date: Sat, 25 Jul 2026 20:58:14 +0200
Subject: [PATCH 07/10] fix: remove outdated withClientCertPatch plugin from
 app.config.ts

---
 app.config.ts | 1 -
 1 file changed, 1 deletion(-)

diff --git a/app.config.ts b/app.config.ts
index 7862bb08..e101a2d5 100644
--- a/app.config.ts
+++ b/app.config.ts
@@ -71,7 +71,6 @@ export default ({ config }: ConfigContext) =>
             { subdomains: "*" }, // uncomment to debug app
         ],
         ["./scripts/trustUserCAs.ts"],
-        ["./scripts/withClientCertPatch.ts"],
         ["./scripts/increaseGradleMemory.ts"],
         [
           "expo-build-properties",

From 5f2692ed83c2a30866e6cc983ff8458be48bc5ad Mon Sep 17 00:00:00 2001
From: deep2web <88986286+deep2web@users.noreply.github.com>
Date: Sun, 26 Jul 2026 00:39:26 +0200
Subject: [PATCH 08/10] show mTLS client cert UI only on Android

---
 components/ServerForm.tsx | 99 ++++++++++++++++++++-------------------
 1 file changed, 52 insertions(+), 47 deletions(-)

diff --git a/components/ServerForm.tsx b/components/ServerForm.tsx
index 41606864..855ec228 100644
--- a/components/ServerForm.tsx
+++ b/components/ServerForm.tsx
@@ -1,4 +1,5 @@
 import React, { useRef, useState } from "react";
+import { Platform } from "react-native";
 import { Text, Button, Input, CheckBox } from "@ui-kitten/components";
 import { cleanServerUrl, sameServer, verifyEvccServer } from "../utils/server";
 import LoadingIndicator from "./animations/LoadingIndicator";
@@ -253,58 +254,62 @@ export default function ServerForm({
         </>
       )}
 
-      <CheckBox
-        style={{ marginTop: 8, marginBottom: 16 }}
-        checked={!!internalServer?.clientCert}
-        onChange={toggleClientCert}
-        testID="serverFormClientCert"
-      >
-        {t("servers.manually.clientCertRequired")}
-      </CheckBox>
-
-      {!!internalServer?.clientCert && (
+      {Platform.OS === "android" && (
         <>
-          <Button
-            style={{ marginTop: 8, marginBottom: certLabel ? 4 : 16 }}
-            appearance={certLabel ? "filled" : "outline"}
-            status={certLabel ? "success" : "basic"}
-            onPress={pickCertificate}
+          <CheckBox
+            style={{ marginTop: 8, marginBottom: 16 }}
+            checked={!!internalServer?.clientCert}
+            onChange={toggleClientCert}
+            testID="serverFormClientCert"
           >
-            {certLabel
-              ? `✓ ${certLabel}`
-              : internalServer?.clientCert?.label
-              ? `✓ ${internalServer.clientCert.label}`
-              : t("servers.manually.clientCertSelect")}
-          </Button>
+            {t("servers.manually.clientCertRequired")}
+          </CheckBox>
 
-          {certLabel && (
-            <Text style={{ marginBottom: 12 }} category="c1" appearance="hint">
-              {t("servers.manually.clientCertNote")}
-            </Text>
-          )}
+          {!!internalServer?.clientCert && (
+            <>
+              <Button
+                style={{ marginTop: 8, marginBottom: certLabel ? 4 : 16 }}
+                appearance={certLabel ? "filled" : "outline"}
+                status={certLabel ? "success" : "basic"}
+                onPress={pickCertificate}
+              >
+                {certLabel
+                  ? `✓ ${certLabel}`
+                  : internalServer?.clientCert?.label
+                  ? `✓ ${internalServer.clientCert.label}`
+                  : t("servers.manually.clientCertSelect")}
+              </Button>
 
-          {!!certBase64 && (
-            <Input
-              style={{ marginTop: 4, marginBottom: 16 }}
-              size="large"
-              status="basic"
-              onChangeText={setCertPassword}
-              value={certPassword}
-              inputMode="text"
-              keyboardType="default"
-              autoCapitalize="none"
-              returnKeyType="go"
-              autoCorrect={false}
-              placeholder={t("servers.manually.clientCertPassword")}
-              secureTextEntry
-              onSubmitEditing={validateAndSaveURL}
-            />
-          )}
+              {certLabel && (
+                <Text style={{ marginBottom: 12 }} category="c1" appearance="hint">
+                  {t("servers.manually.clientCertNote")}
+                </Text>
+              )}
+
+              {!!certBase64 && (
+                <Input
+                  style={{ marginTop: 4, marginBottom: 16 }}
+                  size="large"
+                  status="basic"
+                  onChangeText={setCertPassword}
+                  value={certPassword}
+                  inputMode="text"
+                  keyboardType="default"
+                  autoCapitalize="none"
+                  returnKeyType="go"
+                  autoCorrect={false}
+                  placeholder={t("servers.manually.clientCertPassword")}
+                  secureTextEntry
+                  onSubmitEditing={validateAndSaveURL}
+                />
+              )}
 
-          {!certLabel && !!internalServer?.clientCert && (
-            <Text style={{ marginTop: 4, marginBottom: 16 }} category="c1" appearance="hint">
-              {t("servers.manually.clientCertNote")}
-            </Text>
+              {!certLabel && !!internalServer?.clientCert && (
+                <Text style={{ marginTop: 4, marginBottom: 16 }} category="c1" appearance="hint">
+                  {t("servers.manually.clientCertNote")}
+                </Text>
+              )}
+            </>
           )}
         </>
       )}

From 6fd3bffdf180b16c98b10fa133e1e2658157b222 Mon Sep 17 00:00:00 2001
From: deep2web <88986286+deep2web@users.noreply.github.com>
Date: Sun, 26 Jul 2026 16:02:39 +0200
Subject: [PATCH 09/10] remove mTLS modules from iOS build

---
 modules/client-cert/expo-module.config.json   |  5 +---
 .../client-cert/ios/ClientCertModule.podspec  | 23 -------------------
 .../client-cert/ios/ClientCertModule.swift    |  7 ------
 .../client-cert/src/ClientCertModule.web.ts   |  5 ----
 4 files changed, 1 insertion(+), 39 deletions(-)
 delete mode 100644 modules/client-cert/ios/ClientCertModule.podspec
 delete mode 100644 modules/client-cert/ios/ClientCertModule.swift
 delete mode 100644 modules/client-cert/src/ClientCertModule.web.ts

diff --git a/modules/client-cert/expo-module.config.json b/modules/client-cert/expo-module.config.json
index 63af2adc..4d58e107 100644
--- a/modules/client-cert/expo-module.config.json
+++ b/modules/client-cert/expo-module.config.json
@@ -1,8 +1,5 @@
 {
-  "platforms": ["apple", "android", "web"],
-  "apple": {
-    "modules": ["ClientCertModule"]
-  },
+  "platforms": ["android"],
   "android": {
     "modules": ["expo.modules.clientcert.ClientCertModule"]
   }
diff --git a/modules/client-cert/ios/ClientCertModule.podspec b/modules/client-cert/ios/ClientCertModule.podspec
deleted file mode 100644
index f9525ae8..00000000
--- a/modules/client-cert/ios/ClientCertModule.podspec
+++ /dev/null
@@ -1,23 +0,0 @@
-Pod::Spec.new do |s|
-  s.name           = 'TestModule'
-  s.version        = '1.0.0'
-  s.summary        = 'A sample project summary'
-  s.description    = 'A sample project description'
-  s.author         = ''
-  s.homepage       = 'https://docs.expo.dev/modules/'
-  s.platforms      = {
-    :ios => '16.4',
-    :tvos => '16.4'
-  }
-  s.source         = { git: '' }
-  s.static_framework = true
-
-  s.dependency 'ExpoModulesCore'
-
-  # Swift/Objective-C compatibility
-  s.pod_target_xcconfig = {
-    'DEFINES_MODULE' => 'YES',
-  }
-
-  s.source_files = "**/*.{h,m,mm,swift,hpp,cpp}"
-end
diff --git a/modules/client-cert/ios/ClientCertModule.swift b/modules/client-cert/ios/ClientCertModule.swift
deleted file mode 100644
index 900fca36..00000000
--- a/modules/client-cert/ios/ClientCertModule.swift
+++ /dev/null
@@ -1,7 +0,0 @@
-import ExpoModulesCore
-
-public class TestModule: Module {
-  public func definition() -> ModuleDefinition {
-    Name("TestModule")
-  }
-}
diff --git a/modules/client-cert/src/ClientCertModule.web.ts b/modules/client-cert/src/ClientCertModule.web.ts
deleted file mode 100644
index 486be3f5..00000000
--- a/modules/client-cert/src/ClientCertModule.web.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import { registerWebModule, NativeModule } from 'expo';
-
-class ClientCertModule extends NativeModule<Record<string, never>> {}
-
-export default registerWebModule(ClientCertModule, 'ClientCertModule');

From 88d7264d389dbf63f0be4c66f6dabef69f51ecb5 Mon Sep 17 00:00:00 2001
From: deep2web <88986286+deep2web@users.noreply.github.com>
Date: Sun, 26 Jul 2026 16:07:33 +0200
Subject: [PATCH 10/10] delete obsolete types file

---
 modules/client-cert/src/ClientCertModule.types.ts | 1 -
 1 file changed, 1 deletion(-)
 delete mode 100644 modules/client-cert/src/ClientCertModule.types.ts

diff --git a/modules/client-cert/src/ClientCertModule.types.ts b/modules/client-cert/src/ClientCertModule.types.ts
deleted file mode 100644
index d5ed3238..00000000
--- a/modules/client-cert/src/ClientCertModule.types.ts
+++ /dev/null
@@ -1 +0,0 @@
-// Define your exported module types here.