[GH-ISSUE #386 ] Client SSL Handshake Failed (code=-9806) #383

Author

Owner

@NghiaTranUIT commented on GitHub (Jan 28, 2020):

From your codebase, it's straightforward and it should work. Let me investigate it 👍

@NghiaTranUIT commented on GitHub (Jan 28, 2020): From your codebase, it's straightforward and it should work. Let me investigate it 👍

kerem commented

Author

Owner

@NghiaTranUIT commented on GitHub (Jan 28, 2020):

@yauheniprakapenka I tested on my machine and it works (Same code)

Look like your Proxyman CA was generated from very build, which is not fulfill the new Certificate Requirement from Catalina and result in the SSH Handshake fail.

Please try to reset via Help Menu -> Advanced -> Reset all Data & Certificate. Then try again. It should work 👍

@NghiaTranUIT commented on GitHub (Jan 28, 2020): @yauheniprakapenka I tested on my machine and it works (Same code) <img width="1988" alt="Screen Shot 2020-01-28 at 09 27 37" src="https://user-images.githubusercontent.com/5878421/73230756-e0376e00-41b0-11ea-9953-ece7f8bf5c82.png"> Look like your Proxyman CA was generated from very build, which is not fulfill the new [Certificate Requirement from Catalina ](https://support.apple.com/en-us/HT210176) and result in the SSH Handshake fail. Please try to reset via Help Menu -> Advanced -> Reset all Data & Certificate. Then try again. It should work 👍

kerem commented

Author

Owner

@NghiaTranUIT commented on GitHub (Jan 28, 2020):

Meanwhile, I will create a ticket to migrate old Certificate (if existed) to the new one 👍

@NghiaTranUIT commented on GitHub (Jan 28, 2020): Meanwhile, I will create a ticket to migrate old Certificate (if existed) to the new one 👍

kerem commented

Author

Owner

@NghiaTranUIT commented on GitHub (Jan 28, 2020):

Quick question @yauheniprakapenka. Have you able to successfully see any HTTPS Response from other domain, such as Google.com from Google Chrome? 🤔

@NghiaTranUIT commented on GitHub (Jan 28, 2020): Quick question @yauheniprakapenka. Have you able to successfully see any HTTPS Response from other domain, such as Google.com from Google Chrome? 🤔

kerem commented

Author

Owner

@yauheniprakapenka commented on GitHub (Jan 28, 2020):

I have not found "Reset all Data & Certificate"

I tried:

Menu - Certificate - Reset all proxyman certificate
Menu - Tools - Clear all cache
Menu - Proxyman - Preference - Advanced - Install proxyman helper tool
Restart MacBook
Result: Anyway error 9806

But Safari requests work: https://drive.google.com/open?id=11qR9eVqePqBYtOtA0pamiNp-aMhwab1_

Off-topic:
My colleagues and I are asking you to make it possible to save the sorting settings after each Proxyman run. It is very convenient to see new time queries at the top of the list.
Screenshot 2020-01-28 at 09 20 32

At this moment need to reconfigure sorting after each start.

@yauheniprakapenka commented on GitHub (Jan 28, 2020): I have not found "Reset all Data & Certificate" **I tried:** 1. Menu - Certificate - Reset all proxyman certificate 2. Menu - Tools - Clear all cache 3. Menu - Proxyman - Preference - Advanced - Install proxyman helper tool 4. Restart MacBook **Result**: Anyway error 9806 But Safari requests work: https://drive.google.com/open?id=11qR9eVqePqBYtOtA0pamiNp-aMhwab1_ **Off-topic:** My colleagues and I are asking you to make it possible to save the sorting settings after each Proxyman run. It is very convenient to see new time queries at the top of the list. <img width="426" alt="Screenshot 2020-01-28 at 09 20 32" src="https://user-images.githubusercontent.com/47568606/73240391-e4af5700-41af-11ea-9e9c-5c2f8faaefcc.png"> At this moment need to reconfigure sorting after each start.

kerem commented

Author

Owner

@NghiaTranUIT commented on GitHub (Jan 28, 2020):

It's possible to persist the previous state of sorting. I will work on it 👍

"Reset all Data & Certificate" is in Help

Can you double check the Google Drive link? I couldn't access it @yauheniprakapenka

@NghiaTranUIT commented on GitHub (Jan 28, 2020): It's possible to persist the previous state of sorting. I will work on it 👍 ------------- "Reset all Data & Certificate" is in Help <img width="858" alt="Screen Shot 2020-01-28 at 13 35 47" src="https://user-images.githubusercontent.com/5878421/73240959-243b6a80-41d3-11ea-99b7-364dc1748e55.png"> Can you double check the Google Drive link? I couldn't access it @yauheniprakapenka

kerem commented

Author

Owner

@yauheniprakapenka commented on GitHub (Jan 28, 2020):

Reopened the link
https://drive.google.com/file/d/11qR9eVqePqBYtOtA0pamiNp-aMhwab1_/view?usp=sharing
Poorly visible place of this setting :)
I did: Help -> Advances -> Reset all data. Unfortunately, this did not help. Still a mistake 9806 :(

@yauheniprakapenka commented on GitHub (Jan 28, 2020): 1. Reopened the link https://drive.google.com/file/d/11qR9eVqePqBYtOtA0pamiNp-aMhwab1_/view?usp=sharing 2. Poorly visible place of this setting :) I did: Help -> Advances -> Reset all data. Unfortunately, this did not help. Still a mistake 9806 :(

kerem commented

Author

Owner

@NghiaTranUIT commented on GitHub (Jan 28, 2020):

Thank for the video @yauheniprakapenka . So far, from what I see, you're able to see another HTTPS response (google.com). It means that the Certificate is configed properly.

Regarding your bug, I'm able to reproduce it 🎉

Basically, if we run Swift Playaround on iOS mode -> There is a bug that I'm not aware, which cause the SSL Handshake fail. I assume that iOS Playground is running via a hidden iOS Simulator (I see a lot of requests from iOS Simulator in Proxyman), which doesn't installed Proxyman Certificate yet.

To workaround, I suggest

Switch to macOS Playground mode

Result
Screen Shot 2020-01-28 at 23 33 04

Or Test your code in iOS app with proper iOS Simulator.

@NghiaTranUIT commented on GitHub (Jan 28, 2020): Thank for the video @yauheniprakapenka . So far, from what I see, you're able to see another HTTPS response (google.com). It means that the Certificate is configed properly. Regarding your bug, I'm able to reproduce it 🎉 Basically, if we run Swift Playaround on iOS mode -> There is a bug that I'm not aware, which cause the SSL Handshake fail. I assume that iOS Playground is running via a hidden iOS Simulator (I see a lot of requests from iOS Simulator in Proxyman), which doesn't installed Proxyman Certificate yet. ---------------- To workaround, I suggest - Switch to macOS Playground mode <img width="2032" alt="Screen_Shot_2020-01-28_at_23_33_11" src="https://user-images.githubusercontent.com/5878421/73284293-eec06c80-4226-11ea-99c1-f926d6989d7c.png"> **Result** <img width="2032" alt="Screen Shot 2020-01-28 at 23 33 04" src="https://user-images.githubusercontent.com/5878421/73284340-01d33c80-4227-11ea-963f-eff770af84a2.png"> - Or Test your code in iOS app with proper iOS Simulator.

kerem commented

Author

Owner

@NghiaTranUIT commented on GitHub (Jan 28, 2020):

Meanwhile, I will investigate the fail on iOS Playground 👍

@NghiaTranUIT commented on GitHub (Jan 28, 2020): Meanwhile, I will investigate the fail on iOS Playground 👍

kerem commented

Author

Owner

@yauheniprakapenka commented on GitHub (Jan 28, 2020):

Switching helped! Now it works great :) I completely forgot that at one of the courses on iOS the speaker said to optimize this parameter, I changed it.

@yauheniprakapenka commented on GitHub (Jan 28, 2020): Switching helped! Now it works great :) I completely forgot that at one of the courses on iOS the speaker said to optimize this parameter, I changed it.

kerem commented

Author

Owner

@NghiaTranUIT commented on GitHub (Jan 29, 2020):

Glad to hear that work for you 🌮 I'm fixing the bug on iOS Playground 👍

@NghiaTranUIT commented on GitHub (Jan 29, 2020): Glad to hear that work for you 🌮 I'm fixing the bug on iOS Playground 👍

kerem commented

Author

Owner

@NghiaTranUIT commented on GitHub (Jan 31, 2020):

@yauheniprakapenka From what I investigated, there is no official way to do SSL Proxying on Swift Playground. It happens in other tools too.

There is a workaround at: https://gist.github.com/NghiaTranUIT/275c8da5068d506869a21bd16da27094

@NghiaTranUIT commented on GitHub (Jan 31, 2020): @yauheniprakapenka From what I investigated, there is no official way to do SSL Proxying on Swift Playground. It happens in other tools too. There is a workaround at: https://gist.github.com/NghiaTranUIT/275c8da5068d506869a21bd16da27094

kerem commented

Author

Owner

@yauheniprakapenka commented on GitHub (Feb 2, 2020):

Many thanks! It works)

@yauheniprakapenka commented on GitHub (Feb 2, 2020): Many thanks! It works)

kerem commented

Author

Owner

@yauheniprakapenka commented on GitHub (Aug 1, 2020):

Good evening.

Today I exchanged the old Xiaomi redmi 5 (Android 8) for the new Xiaomi Redme 9a (Android 10). An error is displayed when trying to view the content of requests

Version 2.3.0 (20300)

SSL Handshake Failed
handshakeFailed (NIOSSL.BoringSSLError.sslError ([Error: 268436502 error: 10000416: SSL routines: OPENSSL_internal: SSLV3_ALERT_CERTIFICATE_UNKNOWN]))

My application on old Xiaomi redmi 5 worked perfectly.

Settings in the app:

<base-config cleartextTrafficPermitted = "true">
    <trust-anchors>
        <certificates src = "system" />
    </trust-anchors>
</base-config>

<domain-config>
    <domain includeSubdomains = "true"> **url_link** </domain>
    <trust-anchors>
        <certificates src = "user" />
        <certificates src = "system" />
    </trust-anchors>
</domain-config>

Is it possible that the proxy cannot work with android 10?

@yauheniprakapenka commented on GitHub (Aug 1, 2020): Good evening. Today I exchanged the old Xiaomi redmi 5 (Android 8) for the new Xiaomi Redme 9a (Android 10). An error is displayed when trying to view the content of requests Version 2.3.0 (20300) SSL Handshake Failed handshakeFailed (NIOSSL.BoringSSLError.sslError ([Error: 268436502 error: 10000416: SSL routines: OPENSSL_internal: SSLV3_ALERT_CERTIFICATE_UNKNOWN])) My application on old Xiaomi redmi 5 worked perfectly. Settings in the app: <? xml version = "1.0" encoding = "utf-8"?> <network-security-config> <base-config cleartextTrafficPermitted = "true"> <trust-anchors> <certificates src = "system" /> </trust-anchors> </base-config> <domain-config> <domain includeSubdomains = "true"> **url_link** </domain> <trust-anchors> <certificates src = "user" /> <certificates src = "system" /> </trust-anchors> </domain-config> </network-security-config> Is it possible that the proxy cannot work with android 10?

kerem commented

Author

Owner

@yauheniprakapenka commented on GitHub (Aug 1, 2020):

Its work for me

Xiaomi Redmi 9a (Android 10, MIUI 12.0.1)

In the physical device Settings app> Wi-Fi> Select current Wi-Fi> Configure Proxy
Proxy: manually
Hostname: take from android guideline
Port: take from android guideline
Exceptions: empty
IP Settings: DHCP
Privacy: use the device's MAC address

Click save

In the physical device in the browser, enter http://proxy.man/ssl
Certificate name: proxyman
Usage: VPN and Apps

Press ok

@yauheniprakapenka commented on GitHub (Aug 1, 2020): Its work for me _Xiaomi Redmi 9a (Android 10, MIUI 12.0.1)_ 1. In the physical device Settings app> Wi-Fi> Select current Wi-Fi> Configure Proxy Proxy: manually Hostname: take from android guideline Port: take from android guideline Exceptions: empty IP Settings: DHCP Privacy: use the device's MAC address Click save 2. In the physical device in the browser, enter http://proxy.man/ssl Certificate name: proxyman Usage: VPN and Apps Press ok

kerem commented

Author

Owner

@NghiaTranUIT commented on GitHub (Aug 2, 2020):

Don't forget to install the Certificate on a new Android device 😄 Glad to know it works for you 🌮

@NghiaTranUIT commented on GitHub (Aug 2, 2020): Don't forget to install the Certificate on a new Android device 😄 Glad to know it works for you 🌮

kerem commented

Author

Owner

@vvnsrzn commented on GitHub (Aug 26, 2022):

Hello,

How did you get rid of this?
I have the same issue as you, but I can't move towards.

I installed and trusted my certificate
I did the right proxy
My cert is properly installed and issued by proxy.man/ssl

However, I'm still stuck 😞

I restarted my devices, it doesn't help.

Do you have any idea/suggestion to share?
Any help is more than welcome!

@vvnsrzn commented on GitHub (Aug 26, 2022): Hello, How did you get rid of this? I have the same issue as you, but I can't move towards. 1. I installed and trusted my certificate <img width="503" alt="Screen Shot 2022-08-26 at 1 03 15 PM" src="https://user-images.githubusercontent.com/9358572/186890150-66d49929-e2d5-42a4-bf9b-c69c5b107d79.png"> 2. I did the right proxy <img width="306" alt="Screen Shot 2022-08-26 at 1 04 21 PM" src="https://user-images.githubusercontent.com/9358572/186890315-4e16f5de-84d8-4897-becd-6a52e285692a.png"> 3. My cert is properly installed and issued by proxy.man/ssl <img width="395" alt="Screen Shot 2022-08-26 at 1 08 40 PM" src="https://user-images.githubusercontent.com/9358572/186891021-5d7a2651-17c7-4719-9697-69ec2fca5b4f.png"> However, I'm still stuck 😞 ![Sans titre (1)](https://user-images.githubusercontent.com/9358572/186891779-370b509d-e446-4243-8b20-3dfc474e9115.png) I restarted my devices, it doesn't help. Do you have any idea/suggestion to share? Any help is more than welcome!

kerem commented

Author

Owner

@NghiaTranUIT commented on GitHub (Aug 26, 2022):

Hey @VivianSolide How about the 5th step in https://docs.proxyman.io/debug-devices/android-device ?

Add res/xml/network_security_config.xml
Add to AndroidManifest.xml

@NghiaTranUIT commented on GitHub (Aug 26, 2022): Hey @VivianSolide How about the 5th step in https://docs.proxyman.io/debug-devices/android-device ? - Add res/xml/network_security_config.xml - Add to AndroidManifest.xml

kerem commented

Author

Owner

@vvnsrzn commented on GitHub (Aug 26, 2022):

I'm running on Android 11.

I thought I could do without the 5th step 😕

Sorry for this misunderstanding!

@vvnsrzn commented on GitHub (Aug 26, 2022): I'm running on Android 11. I thought I could do without the 5th step 😕 Sorry for this misunderstanding!

kerem commented