android 2.x上ProxyDroid代理设置anyproxy后浏览器https页面时提示网站的名称和证书中的名称不一致
- Dominant language
- JavaScript
- Stars
- 7.9k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
Plese fill the template when you reporting a new issue, thanks!
#### Which platform are you running AnyProxy
Windows
#### The version of the AnyProxy
3.10.3
#### Your expected behavior of AnyProxy
安装好cert后能够正常浏览https网页吧。
#### The actual behavior of AnyProxy
提示"网站的名称和证书中的名称不一致",证书颁发给anyproxy_internal_https_server。
#### The log of the error
无。
确认源码实现,发现可能原因是anyproxy直接使用httpsServer来进行MITM,导致TLS握手时的相关数据信息在 android client <-> AnyProxy HTTPS Server 和 AnyProxy HTTPS Server <-> Internet Server之间存在差异,进而造成anyproxy生成的证书信息有些字段有问题。
看能否类似mitmproxy中支持https代理的实现来改善此问题。谢谢。
http://docs.mitmproxy.org/en/stable/howmitmproxy.html
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by tracing AnyProxy's httpsServer-based MITM path for version 3.10.3 and compare the TLS handshake behavior with the linked mitmproxy documentation. Done means an Android 2.x client using ProxyDroid can browse HTTPS pages after installing the certificate without a hostname or certificate-name mismatch.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, javascript, nodejs
- Domain
- networking, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100