[GH-ISSUE #1423] SSLV3_ALERT_CERTIFICATE_UNKNOWN #1415

Open
opened 2026-03-03 19:51:19 +03:00 by kerem · 12 comments
Owner

Originally created by @carppond on GitHub (Nov 2, 2022).
Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/1423

Originally assigned to: @NghiaTranUIT on GitHub.

handshakeFailed(NIOSSL.BoringSSLError.sslError([Error: 268436502 error:10000416:SSL routines:OPENSSL_internal:SSLV3_ALERT_CERTIFICATE_UNKNOWN at /Users/nghiatran/Library/Developer/Xcode/DerivedData/NSProxy-chrjhjrygpkcrggquryyaaqcgvhz/SourcePackages/checkouts/swift-nio-ssl/Sources/CNIOBoringSSL/ssl/tls_record.cc:594]))

我在抓包的过程中遇到了这个问题,其中链接的相关 header 如下。在 charles 并没有这个问题
content-type: application/x-thrift
accept: application/x-thrift

Originally created by @carppond on GitHub (Nov 2, 2022). Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/1423 Originally assigned to: @NghiaTranUIT on GitHub. handshakeFailed(NIOSSL.BoringSSLError.sslError([Error: 268436502 error:10000416:SSL routines:OPENSSL_internal:SSLV3_ALERT_CERTIFICATE_UNKNOWN at /Users/nghiatran/Library/Developer/Xcode/DerivedData/NSProxy-chrjhjrygpkcrggquryyaaqcgvhz/SourcePackages/checkouts/swift-nio-ssl/Sources/CNIOBoringSSL/ssl/tls_record.cc:594])) 我在抓包的过程中遇到了这个问题,其中链接的相关 header 如下。在 charles 并没有这个问题 content-type: application/x-thrift accept: application/x-thrift
Author
Owner

@NghiaTranUIT commented on GitHub (Nov 3, 2022):

Can you elaborate where the source of the request? For example, it's from the iOS, Android app (Native, Flutter, or React Native), Web Browser, or Server?

I'd like to investigate.

<!-- gh-comment-id:1301735868 --> @NghiaTranUIT commented on GitHub (Nov 3, 2022): Can you elaborate where the source of the request? For example, it's from the iOS, Android app (Native, Flutter, or React Native), Web Browser, or Server? I'd like to investigate.
Author
Owner

@efa2d19 commented on GitHub (Nov 3, 2022):

Faced same stuff recently in RN app on android.
Recreated and reinstalled certificate and then run adb reboot and everything was fixed
upd: More useful info: it happened in Android Studio emulator (resizable; API 33), user certificates was allowed to be used in the manifest

Proxyman 3.12.0
MacBookAir10,1 Z1240004
MacOS 13.0 (22A380)

<!-- gh-comment-id:1301971782 --> @efa2d19 commented on GitHub (Nov 3, 2022): Faced same stuff recently in RN app on android. Recreated and reinstalled certificate and then run `adb reboot` and everything was fixed upd: More useful info: it happened in Android Studio emulator (resizable; API 33), user certificates was allowed to be used in the manifest Proxyman 3.12.0 MacBookAir10,1 Z1240004 MacOS 13.0 (22A380)
Author
Owner

@zh-d-d commented on GitHub (Nov 15, 2022):

when I use Proxyman watch MacOS application also faced the problem.

Proxyman Version 3.13.0
MacOS Apple M1 Pro

<!-- gh-comment-id:1314927059 --> @zh-d-d commented on GitHub (Nov 15, 2022): when I use Proxyman watch MacOS application also faced the problem. Proxyman Version 3.13.0 MacOS Apple M1 Pro
Author
Owner

@NghiaTranUIT commented on GitHub (Nov 15, 2022):

@zh-d-d if you have installed & trusted the certificate on your Mac, it means Proxyman is ready to intercept HTTPS traffic from other MacOS app.

If you get SSL Error, it means this app might has SSL Pinning which prevents Proxyman to internet.

If you don't mind, what macOS you're using?

<!-- gh-comment-id:1314929607 --> @NghiaTranUIT commented on GitHub (Nov 15, 2022): @zh-d-d if you have [installed & trusted the certificate on your Mac](https://docs.proxyman.io/debug-devices/macos), it means Proxyman is ready to intercept HTTPS traffic from other MacOS app. If you get SSL Error, it means this app might has SSL Pinning which prevents Proxyman to internet. If you don't mind, what macOS you're using?
Author
Owner

@NghiaTranUIT commented on GitHub (Nov 15, 2022):

There are many reasons, each reason needs a particular solution to fix it. You guys can checkout the troubleshooting: https://docs.proxyman.io/troubleshooting/get-ssl-error-from-https-request-and-response

If it doesn't cover your case, please let me know some information:

  • What is the name of the app?
  • System OS?
  • Is it a native/react native/flutter?
  • Is it a CLI or from Web Browser?
<!-- gh-comment-id:1314931398 --> @NghiaTranUIT commented on GitHub (Nov 15, 2022): There are many reasons, each reason needs a particular solution to fix it. You guys can checkout the troubleshooting: https://docs.proxyman.io/troubleshooting/get-ssl-error-from-https-request-and-response If it doesn't cover your case, please let me know some information: - What is the name of the app? - System OS? - Is it a native/react native/flutter? - Is it a CLI or from Web Browser?
Author
Owner

@zh-d-d commented on GitHub (Nov 24, 2022):

thanks for your replay
app name : dbschema
System OS : macOS Monterey

<!-- gh-comment-id:1325842859 --> @zh-d-d commented on GitHub (Nov 24, 2022): thanks for your replay app name : [dbschema](https://dbschema.com/) System OS : macOS Monterey
Author
Owner

@NghiaTranUIT commented on GitHub (Nov 24, 2022):

@zh-d-d React Native requires extra configs to make it works. Have you followed this setup guide: https://docs.proxyman.io/debug-devices/react-native ?

<!-- gh-comment-id:1325843401 --> @NghiaTranUIT commented on GitHub (Nov 24, 2022): @zh-d-d React Native requires extra configs to make it works. Have you followed this setup guide: https://docs.proxyman.io/debug-devices/react-native ?
Author
Owner

@zh-d-d commented on GitHub (Nov 24, 2022):

@zh-d-d React Native requires extra configs to make it works. Have you followed this setup guide: https://docs.proxyman.io/debug-devices/react-native ?

sorry , I have update information .

dbschema it's a macOS pc app, not mobile

<!-- gh-comment-id:1325847017 --> @zh-d-d commented on GitHub (Nov 24, 2022): > @zh-d-d React Native requires extra configs to make it works. Have you followed this setup guide: https://docs.proxyman.io/debug-devices/react-native ? sorry , I have update information . [dbschema](https://dbschema.com/) it's a macOS pc app, not mobile
Author
Owner

@zhumanrakhat commented on GitHub (Nov 24, 2022):

Hi, also got this error in postman app

Error: write EPROTO 50005512:error:10000416:SSL routines:OPENSSL_internal:SSLV3_ALERT_CERTIFICATE_UNKNOWN:../../../../src/third_party/boringssl/src/ssl/tls_record.cc:594:SSL alert number 46

<!-- gh-comment-id:1325946789 --> @zhumanrakhat commented on GitHub (Nov 24, 2022): Hi, also got this error in postman app Error: write EPROTO 50005512:error:10000416:SSL routines:OPENSSL_internal:SSLV3_ALERT_CERTIFICATE_UNKNOWN:../../../../src/third_party/boringssl/src/ssl/tls_record.cc:594:SSL alert number 46
Author
Owner

@burakkarakus commented on GitHub (Jan 3, 2023):

Any updates on this bug? I have the same error: handshakeFailed(NIOSSL.BoringSSLError.sslError([Error: 268436502 error:10000416:SSL routines:OPENSSL_internal:SSLV3_ALERT_CERTIFICATE_UNKNOWN at /Users/nghiatran/Library/Developer/Xcode/DerivedData/NSProxy-chrjhjrygpkcrggquryyaaqcgvhz/SourcePackages/checkouts/swift-nio-ssl/Sources/CNIOBoringSSL/ssl/tls_record.cc:594]))

It works for many websites but not working for the one I need :)

<!-- gh-comment-id:1369804236 --> @burakkarakus commented on GitHub (Jan 3, 2023): Any updates on this bug? I have the same error: handshakeFailed(NIOSSL.BoringSSLError.sslError([Error: 268436502 error:10000416:SSL routines:OPENSSL_internal:SSLV3_ALERT_CERTIFICATE_UNKNOWN at /Users/nghiatran/Library/Developer/Xcode/DerivedData/NSProxy-chrjhjrygpkcrggquryyaaqcgvhz/SourcePackages/checkouts/swift-nio-ssl/Sources/CNIOBoringSSL/ssl/tls_record.cc:594])) It works for many websites but not working for the one I need :)
Author
Owner

@NghiaTranUIT commented on GitHub (Jan 3, 2023):

Can you share some information about your endpoint @burakkarakus ?

  • If it's a mobile app, Does it has SSL Pinning?
  • If it's from your MacBook, what is your development env? Python, Ruby, Ruby, ...
<!-- gh-comment-id:1369834330 --> @NghiaTranUIT commented on GitHub (Jan 3, 2023): Can you share some information about your endpoint @burakkarakus ? - If it's a mobile app, Does it has SSL Pinning? - If it's from your MacBook, what is your development env? Python, Ruby, Ruby, ...
Author
Owner

@burakkarakus commented on GitHub (Jan 4, 2023):

Hello NghiaTranUIT, after you asked I realized that our mobile app has SSL Pinning, so nothing wrong with your software seemingly. Probably that SSLV3 alert is because of that. Thanks for your quick response btw.

<!-- gh-comment-id:1370858065 --> @burakkarakus commented on GitHub (Jan 4, 2023): Hello NghiaTranUIT, after you asked I realized that our mobile app has SSL Pinning, so nothing wrong with your software seemingly. Probably that SSLV3 alert is because of that. Thanks for your quick response btw.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/Proxyman#1415
No description provided.