[GH-ISSUE #1048] handshakeFailed(NIOSSL.BoringSSLError.sslError([Error: 268436502 error:10000416:SSL routines:OPENSSL_internal:SSLV3_ALERT_CERTIFICATE_UNKNOWN])) #1043

New issue

Open

opened 2026-03-03 19:24:03 +03:00 by kerem · 3 comments

kerem commented

2026-03-03 19:24:03 +03:00

Owner

Originally created by @hrz0x on GitHub (Oct 27, 2021).
Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/1048

Originally assigned to: @NghiaTranUIT on GitHub.

Proxyman version? (Ex. Proxyman 1.4.3)

2.34.1

macOS Version? (Ex. mac 10.14)

12.0.1

Steps to reproduce

Connect Android Device to the Proxyman Proxy
Open Google Playstore or other apps
It doesn't show properly

I used my Android Device (Galaxy S7) to capture traffic from a specific app. I used it in Android 6 and everything (including Playstore) worked perfectly with the proxy enabled. The traffic was captureable as well.

However, after I updated my device to Android 7 yesterday, it keeps giving me handshakeFailed(NIOSSL.BoringSSLError.sslError([Error: 268436502 error:10000416:SSL routines:OPENSSL_internal:SSLV3_ALERT_CERTIFICATE_UNKNOWN])) error.

And I am not able to open and use any apps (including Playstore) with the proxy on.
Please help. (www.google.com shows properly though)

Screenshots (optional)

Originally created by @hrz0x on GitHub (Oct 27, 2021). Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/1048 Originally assigned to: @NghiaTranUIT on GitHub. ### Proxyman version? (Ex. Proxyman 1.4.3) 2.34.1 ### macOS Version? (Ex. mac 10.14) 12.0.1 ### Steps to reproduce 1. Connect Android Device to the Proxyman Proxy 2. Open Google Playstore or other apps 3. It doesn't show properly I used my Android Device (Galaxy S7) to capture traffic from a specific app. I used it in Android 6 and everything (including Playstore) worked perfectly with the proxy enabled. The traffic was captureable as well. However, after I updated my device to Android 7 yesterday, it keeps giving me ```handshakeFailed(NIOSSL.BoringSSLError.sslError([Error: 268436502 error:10000416:SSL routines:OPENSSL_internal:SSLV3_ALERT_CERTIFICATE_UNKNOWN]))``` error. And I am not able to open and use any apps (including Playstore) with the proxy on. Please help. (www.google.com shows properly though) ### Screenshots (optional)

kerem commented

2026-03-03 19:24:04 +03:00

Author

Owner

@NghiaTranUIT commented on GitHub (Oct 27, 2021):

Hey @WHTJEON Android 7 has updated the security requirements.

From what I know, from Android 7, you could not intercept HTTP/HTTPS traffic from apps you don't control, such as traffic from PlayStore, Google Chrome, Facebook, ...).

The reason is that it requires you to do 1 important step:

Check out step 5 in the following screenshot (website version)

5. From Android N, we have to trust the Proxyman Certificate in your app by adding the following code: It means that you can only use SSL Proxying in apps, which you are in control
Add res/xml/network_security_config.xml

and

Add to AndroidManifest.xml

If you do it properly, you can capture traffic from your own apps. Regarding the other apps, you could not capture them anymore.

@NghiaTranUIT commented on GitHub (Oct 27, 2021): Hey @WHTJEON Android 7 has updated the security requirements. From what I know, from Android 7, you **could not** intercept HTTP/HTTPS traffic from apps you don't control, such as traffic from PlayStore, Google Chrome, Facebook, ...). The reason is that it requires you to do 1 important step: - Check out step 5 in the following screenshot ([website version](https://docs.proxyman.io/debug-devices/android-device)) ``` 5. From Android N, we have to trust the Proxyman Certificate in your app by adding the following code: It means that you can only use SSL Proxying in apps, which you are in control Add res/xml/network_security_config.xml ``` and ``` Add to AndroidManifest.xml ``` <img width="839" alt="Screen Shot 2021-09-14 at 10 52 27" src="https://user-images.githubusercontent.com/5878421/138984049-bde28e93-d0f1-4a18-a05f-954ca54dbe3e.png"> ------------- If you do it properly, you can capture traffic from your own apps. Regarding the other apps, you could not capture them anymore.

kerem commented

2026-03-03 19:24:04 +03:00

Author

Owner

@hrz0x commented on GitHub (Oct 27, 2021):

But it's weird since my other device which runs Android 10 works just fine.

@hrz0x commented on GitHub (Oct 27, 2021): But it's weird since my other device which runs Android 10 works just fine.

kerem commented

2026-03-03 19:24:04 +03:00

Author

Owner

@NghiaTranUIT commented on GitHub (Oct 27, 2021):

Are you Android 10 rooted?

If you don't mind, please delete the certificate on Android 7 Devices, and try to install it again.

@NghiaTranUIT commented on GitHub (Oct 27, 2021): Are you Android 10 rooted? If you don't mind, please delete the certificate on Android 7 Devices, and try to install it again.