Charles proxy сертификат для android

SSL-сертификаты

Charles создаёт собственные сертификаты для каждого сайта. Если вы не добавите сертификат Charles в список доверенных, то вы увидите предупреждение в браузере или любом другом приложении. Подробнее см. SSL прокси.

Вы можете выставить «доверять всегда» для каждого сертификата, если считаете это допустимым. В этом случае, вам не нужно будет каждый раз подтверждать запрос. Если вы хотите настроить автоматическое подтверждение доверия сертификатам, связанным с Charles, то следуйте данной инструкции. Она подходит для разных браузеров и приложений, после настройки вы больше не будете видеть предупреждения.

Помните, что основные настройки сертификатов Charles изменились в версии 3.4, поэтому даже если вы проходили данную процедуру ранее, необходимо снова выставить настройки.

Windows/ Internet Explorer

Зайдите в меню «Помощь» и выберите пункт «Установить SSL-сертификат CA». Появится окошко с предупреждением, что данный сертификат не проверен или не вызывает доверия.

Щёлкните «Установить сертификат», после чего запуститься мастер импортирования. Сертификат необходимо внести в список доверенных, так что отмените автоматическое распределение.

Вам нужно будет подтвердить идентификационный номер сертификата:
189B6E28 D1635F3A 8325E1E0 02180DBA 2C02C241

Завершите установку SSL-сертификата. Возможно, понадобиться перезапустить IE.

Mozila Firefox

После установки дополнения Charles для Mozila Firefox, зайдите в меню «Инструменты» в раздел Charles. Там необходимо выбрать пункт «Установить SSL-протокол».

После этого откроется окно установки, где необходимо установить «доверять данному сертификату». Затем можно завершать установку.

MAC OS X

Скачайте архив Charles CA Certificate. В нём содержится специальный файл.

Запустите утилиту Keychain Access из папки. Она понадобиться для управления сертификатами. Выберите «логин» и откройте меню «Файл» — «Импорт». Найдите файл .crt, который скачивали ранее и убедитесь, что keychain есть в выпадающем меню.

После импорта сертификатов они будут добавлены к вашему профилю.

Переместите Charles SSL-прокси сертификат с аккаунта keychain путём перетаскивания в System keychain, если вы хотите, чтобы он был доступен всем пользователям.

После этого необходимо перезапустить Safari.

Google Chrome

Для MAC OS X следуйте инструкции выше. Данный пункт предназначен только для пользователей Windows.

Откройте окно «Параметры» и найдите пункт «Управление сертификатами».

Выберите список доверенных сертификатов и щёлкните «Добавить».

Найдите файл charles-proxy-ssl-proxying-certificate.crt. В Windows и Linux он расположен в папке docs в директории, где установлен Charles. Выберите файл, жмите «Далее» и «Закончить». После этого Chrome будет всегда доверять сертификатам, проверенным Charles.

После завершения установки можно удалить файл charles-proxy-ssl-proxying-certificate.crt.

JAVA-приложения

Для приложений Java вы также можете добавить сертификат Charles в список доверенных. После этого все остальные приложения также будут доверять ему.

Помните, что данную операцию, вероятно, придётся проделывать каждый раз после апгрейда Java.

Для начала найдите CAcert-файл, который расположен в JAVA_HOME/jre/lib/security/cacerts. JAVA_HOME — это корневая директория.

Для MAC OS X необходимо скачать специальный архив с файлом charles-proxy-ssl-proxying-certificate.crt. После этого нужно изменить путь к файлу, а после установки его можно удалить.

Введите: keytool -import -alias charles -file CHARLES_DIR/docs/charles-proxy-ssl-proxying-certificate.crt -keystore JAVA_HOME/jre/lib/security/cacerts -storepass changeit

hangeit — это пароль по умолчанию

Далее: keytool -list -keystore JAVA_HOME/jre/lib/security/cacerts -storepass changeit

Вам нужно настроить доступ для всех приложений, либо в каждой по отдельности.

Источник

How to set up Charles Proxy for mobile and web apps?

Ever wondered how to maintain quality of software even in worst-case scenarios be it network failures or server breakdown?

One of the solutions to the above scenario is replicating the possible failure environment by configuring Charles proxy.

Let’s understand how this tool helps in providing the solution to the mentioned cause in the various software apps.

Charles proxy is an interactive web debugging tool which acts as a middleware between the client (mobile or web app) and the internet. Using this tool we can configure client environment to pass all networking requests and responses through Charles proxy so that we can inspect and even change the data midstream to test how the app responds.

In Web and Internet development we are unable to see what is being sent and received between the web browser/client and the server. Without this visibility, it is difficult and time-consuming to determine exactly where the fault is. Charles makes it easy to see what is happening, so we can quickly diagnose and fix problems.

Basic Configuration

This is common for any type of app; mobile or web.

1. Download Charles from the below link:https://www.charlesproxy.com/ make sure that this tool is a paid one, however, we can make use of its trial version.

2. Install the app and have a note of your machine IP address for further configuration

3. Download and install Charles root certificate on the desired remote device where the tests need to be performed i.e, android, iOS device or web browser.

4. Remote device configuration based on the Charles root certificate to be installed on various devices as follows:

IOS Simulator

Open Charles and select the option to install a root certificate on iOS simulator from :

Help>SSL Proxying>Install Charles Root Certificate in iOS Simulator

Open iOS simulator and enable Charles proxy certificate from settings as:

Settings>General>About>Certificate Trust Settings

Open the app under test and validate the requests and response based on the action performed on the app. Experiment adding the breakpoints to API requests and responses.

Android Emulator

Open Emulator settings and configure the Charles proxy for a device with android version N, using either command line or from emulator settings as below:

The command for setting up manual IP on an emulator:

Configuring IP from emulator settings:

Open Charles and select the option to download the Root certificate either from mobile browser hitting chls.pro/ssl or via downloading the file on the system itself post which we can install the same to android device or emulator from:

Help>SSL Proxying>Save Charles Root Certificate…

Save the Charles root certificate to the system, copy to Emulator storage and install it as:

Emulator>Settings>Security>Trusted Credentials>Install from storage>open saved Charles Root certificate

Open the app now and validate the request and response on the Charles, Experiment adding the breakpoints to API requests and responses.

Web Browser (Chrome)

Charles proxy basic configuration remains same for web browsers as well where we install the Charles root certificate on the system and configure it for the browser on the Chrome settings as:

On macOS, please follow the instructions for the macOS above. These instructions only apply to Windows.

1. In Charles go to the Help menu and choose “SSL Proxying > Save Charles Root Certificate”. Save the root certificate as a Binary Certificate (.cer) to the desktop, or somewhere where we can easily access it in the next step.
2. In Chrome, open the Settings. At the bottom of the settings page, click “Advanced” to open the advanced section, then click the “Manage certificates…” button.
3. Go to the “Trusted Root Certification Authorities” tab and click “Import…”.
4. Find the certificate file saved from Charles in the previous step, then click Next and Finish, leaving the default options, until you complete the import. Chrome will now always trust certificates signed by Charles.
5. After importing we can delete the certificate file that has been saved.

IOS Devices

Even for the devices, the concept of configuring Charles remains same as simulators just have to configure the mobile network proxy with the system and open chls.pro/ssl to get the root certificate download and enable it from settings from below steps:

Settings>General>About>Certificate Trust Settings

Android Devices

For connecting android devices configure the network proxy for the device as mentioned below.

Settings>Wifi>Connected network>Advanced>Proxy>Manual>Set host & port

After configuring it download the root certificate by either downloading to the device and installing it or via navigating to chls.pro/ssl from local device browser to download Charles root certificate.

Installation of root certificate may ask to add further security measures to devices for protecting the credentials before root certificate installation, once done the device is ready to be under Charles proxy influence to debug the network traffic.

Let’s assume we have Charles proxy setup ready on our chosen device.

Now let’s discuss how does the debugging work.

Debugging using Charles

This section focus on actual debugging of the requests and responses inspected via Charles and intercepted according to our need to replicate any particular realtime scenario. For interception there are various of its tools performing their respective functionalities, I want to discuss below few which I found very useful in debugging and ensuring the quality of app under test behaving in various network circumstance.

Breakpoints Tool

The Breakpoints tool lets us intercept requests and responses before they are passed through Charles. We can examine and edit the request or response and then decide whether to allow it to proceed or to block it.

When a request or response trips a breakpoint the Breakpoints window automatically opens in Charles and comes to the front. The Breakpoints window contains a list of the requests and responses currently intercepted and waiting for our action. Select the request or response to view and edit the contents. Then decide to Execute, Abort or Cancel the breakpoint.

Источник

Android 11 devices and Charles

This tutorial will show you how to configure Charles and your Android 11 device so you can view your app’s network traffic in plain text. FYI, the root certificate installation steps are slightly different to older Android versions

NOTE: Since Android Nougat (7.1), Google have blocked tools like Charles from intercepting/decrypting network traffic from Play Store apps

NOTE: To proceed with this tutorial, you will need to be able to build your own Android app. Make sure the “Network Security Config File” has been added to your app’s repo (see more details here and here).

Be able to build your own Android app

Make sure you have setup the Charles Root certificate on your Mac

Check Wi-fi networks

Make sure your Mac and Android device are on the same Wi-Fi network

Find your Mac’s local IP address

Open Charles -> Help -> Local IP address.

Make note of the IP address as you will need to enter it into your device later

Navigate to device’s Wi-Fi proxy screen

Settings -> Wi-fi -> long press the connected Wi-Fi network to bring up the menu -> Modify -> Advanced options -> select “Manual” from the proxy drop down

NOTE: there are slight navigation differences between OS versions in how to get to your Wifi proxy settings but they should be fairly similar to these screenshots

Configure device’s proxy settings

This step will proxy all your device’s internet traffic through your laptop

• Proxy hostname: this is your Mac’s local IP address
• Proxy Port: 8888

Accept incoming network traffic from your device

On your device, open Chrome and go to a website

Return to your Mac. You should now see this prompt from Charles. Click “Allow”

Encrypted traffic from the device should now appear in Charles

Download Root certificate for device

Return to the device, open Chrome and go to chls.pro/ssl.

Install root certificate

O pen the “Setting” app -> Security -> Encryption & Credentials -> Install a Certificat e -> CA certificate -> Install anyways -> tap on the certificate

Android may prompt you to enter pin, password or fingerprint before installing the root certificate

Verify root certificate has been “trusted”

Return to Encryption & Credentials. Tap Trusted credentials -> USER

You should now see a certificate from “XK72 Ltd” appear

Enable SSL proxying to view traffic in plain text

Return to Charles, right click the network request you are interested in and click the “Enable SSL Proxying” option

FYI, I am using an Android app a friend created to demonstrate decrypting Android app traffic

NOTE: As mentioned at the start of the article, you need the ability to build your own Android app to view decrypted traffic. This step will not work with an app downloaded from the Play Store

Kill and Reopen app

Kill and reopen the app. You should now see the network request details in plain text

Источник