Wednesday, December 31, 2014

Charles Proxy - SSL and Non SSL traffic interception

Charles Proxy - SSL and Non SSL traffic interception

Since as part of a project had to do some network monitoring to know whether the library is making a network connection and it fails or even without doing any of the network request it fails. 
The first part of this was to download the Charles proxy for MAC Os. this can be downloaded from the location http://www.charlesproxy.com/documentation/installation/ http://www.charlesproxy.com/download/

In order to decrypt the encrypted traffic, the device needs to install the certificate given by the Charles. This certificate acts as an intermediate certificate between client and server. When the server sends encrypted traffic it is able to decrypt because the certificate info that is passed to the server is the charles one. 

In latest versions of Charles, we also have to add the site which needs to be SSL decrypted in to the filter under proxy settings under Locations tab. Like shown in the image below.



References: 

No comments:

Post a Comment