SSL cert does not work

[danielrzad]

Hi,

I've followed the guide "How to Inspect & Modify HTTP Traffic from Android Apps" (https://requestly.com/blog/modify-http-traffic-from-android-apps/) and completed every step, but I'm encountering a problem with the SSL certificate. The installation of the SSL certificate was successful, and I can see the certificate installed in the settings. However, when I visit any HTTPS site, I cannot connect because it says that the connection is insecure.

I'm working on Windows machine, Requestly ver. 1.6.0.

[nsrCodes]

Hey @danielrzad
Our desktop app is unable to intercept and modify request from apps on android that have SSL pinning enabled (also mentioned inside the article). We started to notice this even more ever since the release of android 14.

Hence we tried to rather make it easier to intercept traffic from your own apps (where you can add Requestly to the trust store inside android emulator. It's a one-click setup). Although this is currently only available on macOS, I'll try to get this released on windows as well ASAP.

Could you please provide more details about what your are trying to achieve, and whether this solution would work for you? You can refer to the setup docs here

[danielrzad]

Hi. Thanks for the quick response. I need to check network traffic of a specific application. Requestly is very good for this, as it allows filtering network traffic by a given application.

To do this, I launched the Windows Subsystem for Android and configured the proxy according to the guide (https://requestly.com/blog/modify-http-traffic-from-android-apps/). The SSL certificate was added correctly, but when I wanted to verify if the proxy was indeed working and launched Firefox in WSA, I couldn't visit any website due to the "Connection is not secured" error.

[wrongsahil]

Hey @danielrzad . We haven't tested extensively for Window Subsystem for Android. This is the first time someone has tried testing on it 😅 .
AFAIK it should work properly on all browsers on Android (as it contains no SSL Pinning). So Window Subsystem for Android is not a problem here. Can you try with chrome and check if the problem exist there too?

Also can you open http://amiusing.requestly.io (http not https) after connecting to proxy and share the status of the page.

[danielrzad]

Hi,

Thanks for the quick response and your willingness to collaborate on this issue. I checked the situation using the Chrome browser, and the network works there without any problems. However, when I opened the built-in Google Search, it says that I don't have an Internet connection (screenshot attached). The built-in Google Search works perfectly without a proxy connection. Based on these issues, I think they might be related to SSL Pinning.

Built in Google Search

Output from visiting http://amiusing.requestly.io
Chrome:

Firefox:

Your application is excellent for monitoring the network traffic of specific Android applications. Because of this, I could implement it in my company. However, the current method of capturing network traffic might not be feasible due to SSL pinning. Have you considered using a VPN to capture traffic or any other method that would allow capturing network traffic from applications without the limitations associated with using a proxy?