Charles proxy fails on SSL Connect Method

ssl proxy iptables charles-proxy
user1318504 picture user1318504 · Oct 1, 2013 · Viewed 63.1k times · Source

I have Android 4.3 forced to use Charles proxy via IPTABLES. The charles certificate is installed on the phone. I am able to capture normal SSL traffic like https websites in the browser. All POST and GET methods seem to work fine. In a particular app, it fails when using the SSL CONNECT method.

  • URL: https://XX.XX.XXX.XXX/
  • Status: Failed
  • Failure: SSLHandshake: Received fatal alert: unknown_ca
  • Response Code: - Protocol: HTTP/1.0
  • Method: CONNECT

Answer

Tomer Even picture Tomer Even · Jun 21, 2017

From iOS 10.3 you also need to go to Settings > General > About > Certificate Trust Settings and trust Charles certificate.

enter image description here

Related questions

Problems using Maven and SSL behind proxy

I just downloaded Maven and was trying to run the simple command found on the "Maven in Five Minutes" page (http://maven.apache.org/guides/getting-started/maven-in-five-minutes.html). This is the command: mvn archetype:generate -DgroupId=com.mycompany.app -DartifactId=…

Read More
NGINX to reverse proxy websockets AND enable SSL (wss://)?

I'm so lost and new to building NGINX on my own but I want to be able to enable secure websockets without having an additional layer. I don't want to enable SSL on the websocket server itself but instead I …

Read More
Nginx does redirect, not proxy

I want to set up Nginx as a reverse proxy for a https service, because we have a special usecase where we need to "un-https" a connection: http://nginx_server:8080/myserver ==> https://mysecureservice But what happens is that the …

Read More