[GH-ISSUE #1738] Proxyman cannot handle HTTPS traffic whose CONNECT request HOST is IP instead of server name. #1730

Closed
opened 2026-03-03 19:53:51 +03:00 by kerem · 0 comments
Owner

Originally created by @cesaryuan on GitHub (Aug 13, 2023).
Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/1738

Description

Hi, thanks for you excellant product!

I'm trying to capture traffic from Android application. Here is my procedures:

  1. Root the android device
  2. install the proxyman cert to system CA
  3. install Proxydroid app to phone
  4. set Proxydroid to transfer the traffic to [ProxymanIp]:9090
  5. open android chrome and then check capture on Proxyman

image

We can see that all HTTPS capture cannot get domain but only ip. It causes that proxyman cannot capture HTTPS correctly.

However, other alternative proxy software on Windows such as Fiddler Classic and Mitmproxy can handle this correctly (Fiddler need additional settings). As far as I know, they obtain the server name indicator from the client's TLS handshake instead of using the HOST field from the CONNECT. (Reference https://groups.google.com/g/httpfiddler/c/hvsDR14j1Lg/m/P02zBzIYCE4J)

It seems there is an similar issue. But I'm not sure. Proxyman does not use SNI when generating certificates for use with SSL Proxying · Issue #1581 · ProxymanApp/Proxyman

Therefore, it will be wonderful if you can fix this issue.

Steps to Reproduce

  1. Root the android device
  2. install the Proxyman cert to android system CA
  3. install Proxydroid app to phone
  4. set Proxydroid to transfer the traffic to <Proxyman's IP>:9090
  5. open android chrome and then check capture on Proxyman

Current Behavior

image

Expected Behavior

image

Environment

  • App version: e.g Proxyman Windows 2.2.0
  • Windows version: 22H2
Originally created by @cesaryuan on GitHub (Aug 13, 2023). Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/1738 ## Description Hi, thanks for you excellant product! I'm trying to capture traffic from Android application. Here is my procedures: 1. Root the android device 2. install the proxyman cert to system CA 3. install Proxydroid app to phone 4. set Proxydroid to transfer the traffic to [ProxymanIp]:9090 5. open android chrome and then check capture on Proxyman ![image](https://github.com/ProxymanApp/Proxyman/assets/35998162/7dcdcf51-7dd0-45be-8927-958bbd0b62cf) We can see that all HTTPS capture cannot get domain but only ip. It causes that proxyman cannot capture HTTPS correctly. However, other alternative proxy software on Windows such as Fiddler Classic and Mitmproxy can handle this correctly (Fiddler need additional settings). As far as I know, they obtain the server name indicator from the client's TLS handshake instead of using the HOST field from the CONNECT. (Reference [https://groups.google.com/g/httpfiddler/c/hvsDR14j1Lg/m/P02zBzIYCE4J](https://groups.google.com/g/httpfiddler/c/hvsDR14j1Lg/m/P02zBzIYCE4J)) It seems there is an similar issue. But I'm not sure. [Proxyman does not use SNI when generating certificates for use with SSL Proxying · Issue #1581 · ProxymanApp/Proxyman](https://github.com/ProxymanApp/Proxyman/issues/1581) Therefore, it will be wonderful if you can fix this issue. ## Steps to Reproduce 1. Root the android device 2. install the Proxyman cert to android system CA 3. install Proxydroid app to phone 4. set Proxydroid to transfer the traffic to <Proxyman's IP>:9090 5. open android chrome and then check capture on Proxyman ## Current Behavior ![image](https://github.com/ProxymanApp/Proxyman/assets/35998162/503f918b-36fd-48ef-8d06-70b6ddb8c172) ## Expected Behavior ![image](https://github.com/ProxymanApp/Proxyman/assets/35998162/999fc8a9-a49e-4019-8769-145af18fbf61) ## Environment - App version: e.g Proxyman Windows 2.2.0 - Windows version: 22H2
kerem 2026-03-03 19:53:51 +03:00
  • closed this issue
  • added the
    bug
    label
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/Proxyman#1730
No description provided.