Why some iphone apps won't finish ssl handshake with Charles Proxy?

ios iphone ssl proxy reverse-engineering
Grant Brown picture Grant Brown · Jul 26, 2015 · Viewed 24.4k times · Source

I am using Charles Proxy to see all of the traffic that is coming out of my iphone. I have the ssl certificate/profile installed on my iphone and I can see a lot of the traffic that is ssl encrypted. However, some applications seem to not finish the ssl handshake.

The error is: "SSLHandshake: Remote host closed connection during handshake" and then Charles Proxy suggests to configure the application to trust the Charles Root Certificate. I thought I did when I installed the profile onto my iphone?

Any explanation of this/way to fix it?

Answer

Neil Sarkar picture Neil Sarkar · Jul 19, 2017

Yes, SSL pinning is a possibility. Although as of iOS 10.3, you must take an additional step to trust the Charles Root Certificate that is not currently documented on their website edit: this info is now under iOS Devices here: https://www.charlesproxy.com/documentation/using-charles/ssl-certificates/

Settings > General > About > Certificate Trust Testings

Source: https://www.neglectedpotential.com/2017/04/trusting-custom-root-certificates-on-ios-10-3/

Related questions

Using SSL in an iPhone App - Export Compliance

I'm looking at creating an iPhone app that will communicate with a REST Web service. Because some user-sensitive data (name, address, age, etc) will be transmitted, I'm looking at securing the connections with SSL. However, on my previous escapades into …

Read More
How to check content of certificate.p12 WITHOUT installing on the Keychain or accessing apple portal

I have an iOS certificate.p12 file, is it possible to check the content of .P12 file (iOS certificate + public key) and be sure that it is a correct Distribution certificate and not (development or wildcard), I know it is …

Read More
How can I develop for iPhone using a Windows development machine?

Is there any way to tinker with the iPhone SDK on a Windows machine? Are there plans for an iPhone SDK version for Windows? The only other way I can think of doing this is to run a Mac VM …

Read More