<debug-overrides> <trust-anchors> <certificates src="user" /> </trust-anchors> </debug-overrides> This allows debugging builds to trust user CAs. Never include this in production.