[vader1]

Oh, it works fine for me. The problem is with the average person who doesn't know or want to know what a self-signed certificate is.

"When you first connect, it will show you a popup with a long set of characters. Check if it ends with A4FE and if so, click yes" is the very maximum I might be able to squeeze out of them. Manually importing a certificate in the trust store and dealing with the scary warnings ("Someone is monitoring your connection!") it generates is a no go.

[13throwaway]

If you add it to that directory it won't show any warnings. Still, not so good for the average person because it requires root and might not persist between updates.