alibaba / alibaba/anyproxy

android 2.x上ProxyDroid代理设置anyproxy后浏览器https页面时提示网站的名称和证书中的名称不一致

Open
#128 5 comments 0 reactions 0 assignees View on GitHub
needs feedback
Dominant language
JavaScript
Stars
7.9k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

Plese fill the template when you reporting a new issue, thanks!

#### Which platform are you running AnyProxy

Windows
#### The version of the AnyProxy

3.10.3

#### Your expected behavior of AnyProxy

安装好cert后能够正常浏览https网页吧。

#### The actual behavior of AnyProxy

提示"网站的名称和证书中的名称不一致",证书颁发给anyproxy_internal_https_server。

#### The log of the error

无。

确认源码实现,发现可能原因是anyproxy直接使用httpsServer来进行MITM,导致TLS握手时的相关数据信息在 android client <-> AnyProxy HTTPS Server 和 AnyProxy HTTPS Server <-> Internet Server之间存在差异,进而造成anyproxy生成的证书信息有些字段有问题。

看能否类似mitmproxy中支持https代理的实现来改善此问题。谢谢。
http://docs.mitmproxy.org/en/stable/howmitmproxy.html

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by tracing AnyProxy's httpsServer-based MITM path for version 3.10.3 and compare the TLS handshake behavior with the linked mitmproxy documentation. Done means an Android 2.x client using ProxyDroid can browse HTTPS pages after installing the certificate without a hostname or certificate-name mismatch.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, javascript, nodejs
Domain
networking, security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.