SSL handshake error
See original GitHub issueSteps to reproduce the problem:
- Take an Android 7.1.2 Xiaomi Redmi 4X with MIUI 10.3
- Install mitmproxy
- launch mitmdump command
- Set proxy on the phone & Install root certificate provided by the domain mitm.it using settings app: “More settings” > “Privacy” > “Install certificate”
- Go to any apps and try to make a http request like twitter or discordapp
- Errors appears:
192.168.0.14:56294: CONNECT android.googleapis.com:443
<< Cannot establish TLS with client (sni: android.googleapis.com): TlsException("SSL handshake error: Error([('SSL routines', 'ssl3_read_bytes', 'sslv3 alert certificate unknown')],)",)
System information
Mitmproxy: 4.0.4 binary Python: 3.6.3 OpenSSL: OpenSSL 1.1.0h 27 Mar 2018 Platform: Linux-5.2.5-arch1-1-ARCH-x86_64-with-arch
Issue Analytics
- State:
- Created 4 years ago
- Reactions:2
- Comments:6 (1 by maintainers)
Top Results From Across the Web
What Is SSL Handshake & How Do I Fix SSL ... - HubSpot Blog
SSL Handshake Failed is an error message that occurs when the client or server wasn't able to establish a secure connection.
Read more >How to Fix “SSL Handshake Failed” & "Cloudflare 525" Error
An SSL Handshake Failure or Error 525 means that the server and browser were unable to establish a secure connection. This can happen...
Read more >How to Fix the “SSL Handshake Failed” Error? - ClickSSL
An SSL handshake error, also known as the error 525 occurs when the two endpoints (server and client) are unable to establish a...
Read more >SSL Handshake Failed Error — Ultimate Guide by Experts
The SSL Handshake Error occurs if the read access has not been granted to the OS, thus preventing the web server from completing...
Read more >SSL Handshake Failures - Baeldung
5. Handshake Failure Scenarios · 5.1. Missing Server Certificate · 5.2. Untrusted Server Certificate · 5.3. Missing Client Certificate · 5.4.
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
You will have a problem unless you can modify the app or service to prevent it from checking the certificate it is presented against what it expects. Think of it like this: You order an uber and you are old the vehicle picking you up will be a red Toyota. You go outside and wait but a green ford shows up saying they are your uber. You refuse to accept the ride, based on previously provided knowledge.
Th same thing for the app, you will need to modify the app’s previous knowledge of the certificate, otherwise it will continue to reject the MITM certificate.
And so ?? it’s the whole point of why I want to use that! I want to see what is coming in and out of my phone.