折腾:
【已解决】Charles中设置SSL证书以支持抓取https和CONNECT请求不显示unknown
期间,之前没有开启SSL,没有遇到类似错误。
后来去开启了SSL,安装了Mac的证书和Android手机中的证书后,倒是出现了:
URL https://childapi.xxx.com Status Failed Failure Client SSL handshake failed: An unknown issue occurred processing the certificate (certificate_unknown) Notes You may need to configure your browser or application to trust the Charles Root Certificate. See SSL Proxying in the Help menu. Response Code 200 Connection established
![](https://www.crifan.com/files/pic/uploads/2021/05/5920e50d4cf7489ca45570305fb69530.jpg)
而此处确定开启了:
Enable SSL Proxying
![](https://www.crifan.com/files/pic/uploads/2021/05/bd2840300eed4b87a3a934644cbc9587.jpg)
Mac中也安装好了Root CA证书:
![](https://www.crifan.com/files/pic/uploads/2021/05/aacfbff5308045feb6615ca26bad5b39.jpg)
Charles Proxy CA (30 八月 2018, licrifandeMacBook-Pro.local)
且xxxapp的首页,刷新页面,就会多出2个出错的请求:
![](https://www.crifan.com/files/pic/uploads/2021/05/7d1ff1e919a84510abfa38df14c9f664.jpg)
去把
Enable SSL Proxying
的location改为所有的:*
![](https://www.crifan.com/files/pic/uploads/2021/05/fef0ad93e41846808e0749f3196409ea.jpg)
参考:
设置为:host *,port *
![](https://www.crifan.com/files/pic/uploads/2021/05/9877ba20e68b48e1aa95d98cdeb234d7.jpg)
问题依旧:
![](https://www.crifan.com/files/pic/uploads/2021/05/85739637a60349428e3f0cd8210d4989.jpg)
Charles Client SSL handshake failed: An unknown issue occurred processing the certificate (certificate_unknown)
“You can face with this problem at some applications like Facebook or Instagram. Charles certificate doesn’t work at some new apps because they are using a technique named as SSL-PINNING. ”
难道此处要抓包的xxx用了SSL PINNING?
此处已经:
HTTP Proxy-》选了:Enable transparent HTTP proxying
![](https://www.crifan.com/files/pic/uploads/2021/05/4c8644b9573c48c98d7b9f438fac9e5f.jpg)
去看看:
![](https://www.crifan.com/files/pic/uploads/2021/05/2c0feb6a47cb4737b98dd5c64b5999f8.jpg)
![](https://www.crifan.com/files/pic/uploads/2021/05/7a9af90fa8ef4e9bad4c5a49dc0e9dc5.jpg)
这里的:
10.108.133.188
应该就是当前的安卓手机的的IP
其是:
把Charles当前的证书,Save保存后,发送到安卓手机中,去安装
去试试
Help-》SSLProxying-》Save Charles Root Certificate
![](https://www.crifan.com/files/pic/uploads/2021/05/6398a07f8c064191ba3512e30dba4d54.jpg)
![](https://www.crifan.com/files/pic/uploads/2021/05/513d7609390942b3a947d86e8dab1885.jpg)
![](https://www.crifan.com/files/pic/uploads/2021/05/51e819306a79491d9feacf7ae227567a.jpg)
![](https://www.crifan.com/files/pic/uploads/2021/05/083d012f2d10431ab0bc40650cf2c1ac.jpg)
再去手机中,登录AirDroid才能接受来自电脑发送的文件
然后接受文件
![](https://www.crifan.com/files/pic/uploads/2021/05/916e57fecc414450a481de9636e035a1.jpg)
![](https://www.crifan.com/files/pic/uploads/2021/05/9dba333927dc414a9f9672da00aec5ac.jpg)
再去点击以安装
![](https://www.crifan.com/files/pic/uploads/2021/05/493576c13d8d4f37a6b223789bf3eec8.jpg)
![](https://www.crifan.com/files/pic/uploads/2021/05/c9864662b8084057a3e7c036b3bf4938.jpg)
然后:
【未解决】锤子M1L安卓手机已安装的Charles的pem或cer证书但找不到
另外,修改了SSL的过滤的host和port,也是不行:
![](https://www.crifan.com/files/pic/uploads/2021/05/6de7c092db8b4cf5abcc74c78f7f2306.jpg)
注意,关闭SSL的话:
![](https://www.crifan.com/files/pic/uploads/2021/05/6151de121aec417999d7b2798d376de3.jpg)
至少还能抓取到一些信息,至少不会是error:
![](https://www.crifan.com/files/pic/uploads/2021/05/50e1516675794918ac653f69af3c0053.jpg)
此处,感觉是:
用于测试的手机,是安卓的锤子M1L,无法root,无法安装证书,导致此处Charles还是出错。
所以,去换个手机试试,此处先去试试iPhone,如果还是不行,再去找另外一个可以(root的)安装证书的安卓。
那就先去:
【已解决】给iPhone中设置Charles的Wifi代理
再去:
【已解决】iPhone中安装Charles证书使得可以抓包https和CONNECT
最终整理出完全的操作流程和注意事项,详见:
【整理】Mac中用Charles抓包iOS或Android手机app中包括https的数据
转载请注明:在路上 » 【已解决】Charles已安装证书且开启SSL但https请求出错:Client SSL handshake failed – Remote host closed connection during handshake