Feat #13555 add server cert field, similar to client cert

[crisoagf]

Initial code for server certificate field.

[github-actions]

Label error. Requires exactly 1 of: changelog:.*. Found: 📱mobile

[zackpollard]

Hey, could you please provide more information on what this is supposed to achieve?

[crisoagf]

Hey, could you please provide more information on what this is supposed to achieve?

Sure thing!

This is an attempt to implement certificate selection for self-signed/enterprise-signed servers without simply disabling SSL certificate checking. It creates another settings field, similar to the client certificate selection, to import a root or self-signed certificate and use that for connection validation. AFAICT, this is only needed for Android, for iPhones already respect user imported certificates.

Currently, the only option for custom root certs or self-signed certs in Android is "Allow self-signed SSL certificates" that accepts any certificate that matches the hostname, which is at least a bit scary from an MITM attack perspective.

Context is #13555 .