Did you try adding your CA to /system/etc/security/ ?
"When you first connect, it will show you a popup with a long set of characters. Check if it ends with A4FE and if so, click yes" is the very maximum I might be able to squeeze out of them. Manually importing a certificate in the trust store and dealing with the scary warnings ("Someone is monitoring your connection!") it generates is a no go.