[GH-ISSUE #1821] [BUG] Why "Add App / Domain..." in the SSL Proxying List doesn't work for me #1816

Closed
opened 2026-03-03 19:54:36 +03:00 by kerem · 6 comments
Owner

Originally created by @simitka on GitHub (Oct 20, 2023).
Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/1821

Originally assigned to: @NghiaTranUIT on GitHub.

Description

Hi. I need help to understand why the rule set via Wildcard Host doesn't work for me in the SSL Proxying List

I have a file on the link https://d1utwsjqoc2wxw.cloudfront.net/FARM-JAM/Levels/4.3.0/Prod/Android/common/common_hash.txt

  • In the SSL Proxying List, I add a rule using "Add App / Domain..." – everything works, the traffic is decrypted
  • But if I try to add a rule to the SSL Proxying List using "Add Wildcard" (for example d1utwsjqoc2wxw.cloudfront.net* or *.cloudfront.net*) – traffic is not decrypted

Help me understand why this is happening, thank you

Originally created by @simitka on GitHub (Oct 20, 2023). Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/1821 Originally assigned to: @NghiaTranUIT on GitHub. ## Description Hi. I need help to understand why the rule set via Wildcard Host doesn't work for me in the SSL Proxying List I have a file on the link https://d1utwsjqoc2wxw.cloudfront.net/FARM-JAM/Levels/4.3.0/Prod/Android/common/common_hash.txt - In the SSL Proxying List, I add a rule using "Add App / Domain..." – everything works, the traffic is decrypted - But if I try to add a rule to the SSL Proxying List using "Add Wildcard" (for example d1utwsjqoc2wxw.cloudfront.net* or \*.cloudfront.net*) – traffic is not decrypted Help me understand why this is happening, thank you <!-- What do you need help with? -->
kerem 2026-03-03 19:54:36 +03:00
Author
Owner

@NghiaTranUIT commented on GitHub (Oct 21, 2023):

@Simitka sorry for this trouble. I investigated this issue. Turn out there is a race condition issue when closing alive connections. As a result, this request is still alive and doesn't reload to get new data.

It's fixed. You can try this Beta build: https://download.proxyman.io/beta/Proxyman_4.12.0_fix_closing_connection.dmg

Video

https://github.com/ProxymanApp/Proxyman/assets/5878421/a2ff024c-d217-400e-99eb-75eac8f30328

<!-- gh-comment-id:1773611315 --> @NghiaTranUIT commented on GitHub (Oct 21, 2023): @Simitka sorry for this trouble. I investigated this issue. Turn out there is a race condition issue when closing alive connections. As a result, this request is still alive and doesn't reload to get new data. It's fixed. You can try this Beta build: https://download.proxyman.io/beta/Proxyman_4.12.0_fix_closing_connection.dmg ### Video https://github.com/ProxymanApp/Proxyman/assets/5878421/a2ff024c-d217-400e-99eb-75eac8f30328
Author
Owner

@simitka commented on GitHub (Oct 21, 2023):

Build:
https://download.proxyman.io/beta/Proxyman_4.12.0_fix_closing_connection.dmg

Device:

  • Override MacOS Proxy
  • Connected Android device

Notes:
In SSL Proxying List URL, Wildcard regex rules work correctly.
Checked that the traffic from the host https://d1utwsjqoc2wxw.cloudfront.net/FARM-JAM/Levels/4.3.0/Prod/Android/common/common_hash.txt is decrypted if Wildcard is specified:


@NghiaTranUIT Thanks a lot for the fix! This bug confused me all the time while I was using Proxyman, but it seemed to me that the problem was on my side. Looking forward to the update:)

<!-- gh-comment-id:1773720097 --> @simitka commented on GitHub (Oct 21, 2023): **Build:** https://download.proxyman.io/beta/Proxyman_4.12.0_fix_closing_connection.dmg **Device:** - Override MacOS Proxy - Connected Android device **Notes:** In SSL Proxying List URL, Wildcard regex rules work correctly. Checked that the traffic from the host https://d1utwsjqoc2wxw.cloudfront.net/FARM-JAM/Levels/4.3.0/Prod/Android/common/common_hash.txt is decrypted if Wildcard is specified: - \*.cloudfront.net* - https://\*.cloudfront.net* - d1utwsjqoc2wxw.cloudfront.net* --- @NghiaTranUIT Thanks a lot for the fix! This bug confused me all the time while I was using Proxyman, but it seemed to me that the problem was on my side. Looking forward to the update:)
Author
Owner

@NghiaTranUIT commented on GitHub (Oct 21, 2023):

Thanks for letting me know the result 👍

Sorry again for this issue. I'm going to bump a new update this weekend.

<!-- gh-comment-id:1773783220 --> @NghiaTranUIT commented on GitHub (Oct 21, 2023): Thanks for letting me know the result 👍 Sorry again for this issue. I'm going to bump a new update this weekend.
Author
Owner

@simitka commented on GitHub (Oct 30, 2023):

@NghiaTranUIT Hi. I want to return to this problem, two updates have already been released (4.13.0 and 4.14.0), and I got to reset the SSL Proxying List tab


In the build 4.12.0 fix that you threw above, it worked, the video below https://youtu.be/_mbtwz1ZOw4

It's fixed. You can try this Beta build: https://download.proxyman.io/beta/Proxyman_4.12.0_fix_closing_connection.dmg

But on release version 4.13.0 and 4.14.0 I still don't have the "*" in wildcard working, video is also below https://youtu.be/1msuQEmxM8s

<!-- gh-comment-id:1784901978 --> @simitka commented on GitHub (Oct 30, 2023): @NghiaTranUIT Hi. I want to return to this problem, two updates have already been released (4.13.0 and 4.14.0), and I got to reset the SSL Proxying List tab --- In the build 4.12.0 fix that you threw above, it worked, the video below https://youtu.be/_mbtwz1ZOw4 > It's fixed. You can try this Beta build: https://download.proxyman.io/beta/Proxyman_4.12.0_fix_closing_connection.dmg But on release version 4.13.0 and 4.14.0 I still don't have the "*" in wildcard working, video is also below https://youtu.be/1msuQEmxM8s
Author
Owner

@NghiaTranUIT commented on GitHub (Oct 30, 2023):

Ah, I see, it's a different bug. You can fix it by simply dragging your *.cloudfront.net* to the top of the list.

The bug is:

d1utwsjqoc2wxw.cloudfront.net exists in the list, but in the higher order. Proxyman accidentally returns it without evaluating the next rule.

Demo

https://github.com/ProxymanApp/Proxyman/assets/5878421/d57c29c7-728b-4665-940d-b97ad6880731

<!-- gh-comment-id:1784951897 --> @NghiaTranUIT commented on GitHub (Oct 30, 2023): Ah, I see, it's a different bug. You can fix it by simply dragging your `*.cloudfront.net*` to the top of the list. The bug is: `d1utwsjqoc2wxw.cloudfront.net` exists in the list, but in the higher order. Proxyman accidentally returns it without evaluating the next rule. ## Demo https://github.com/ProxymanApp/Proxyman/assets/5878421/d57c29c7-728b-4665-940d-b97ad6880731
Author
Owner

@simitka commented on GitHub (Nov 2, 2023):

Raised the rule *.cloudfront.net* higher and everything worked, thank you!
Should I have a separate issue for this? Or will it not be fixed?

<!-- gh-comment-id:1790552964 --> @simitka commented on GitHub (Nov 2, 2023): Raised the rule `*.cloudfront.net*` higher and everything worked, thank you! Should I have a separate issue for this? Or will it not be fixed?
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/Proxyman#1816
No description provided.