charles——OpenSSL——安卓7.0以上https抓包

r囧r小猫 2023-10-03 16:59 39阅读 0赞

参考1：[https://blog.csdn.net/djzhao627/article/details/102812783?utm\_medium=distribute.pc\_relevant.none-task-blog-BlogCommendFromMachineLearnPai2-1.nonecase&depth\_1-utm\_source=distribute.pc\_relevant.none-task-blog-BlogCommendFromMachineLearnPai2-1.nonecase][https_blog.csdn.net_djzhao627_article_details_102812783_utm_medium_distribute.pc_relevant.none-task-blog-BlogCommendFromMachineLearnPai2-1.nonecase_depth_1-utm_source_distribute.pc_relevant.none-task-blog-BlogCommendFromMachineLearnPai2-1.nonecase]

参考2：[https://www.cnblogs.com/duobazi/p/11588993.html][https_www.cnblogs.com_duobazi_p_11588993.html]

参考3：[https://blog.csdn.net/ShadowySpirits/article/details/79756274][https_blog.csdn.net_ShadowySpirits_article_details_79756274]

![83a19d87bc6c1609ec92a65bb8253c3f.png][]

=====================================================================================================

## [解决Charles不能抓到https的问题][https_www.cnblogs.com_duobazi_p_11588993.html] ##

1.用Charles导出证书，随便命名 charles.pem

![395cbfd035fa610c3cd3c65a3b6666dc.png][]

2.安装open ssl([http://slproweb.com/products/Win32OpenSSL.html][http_slproweb.com_products_Win32OpenSSL.html])，然后配置环境变量，把openssl安装路径bin的路径(例如 C:\\OpenSSL-Win64\\bin)加入到操作系统的系统环境变量Path中

![445e9b00315cde61c67caea8b4d00dd2.png][]

3.将导出的的证书(charles.pem)导入电脑中

4.在cmd中输入

openssl x509 -subject\_hash\_old -in <Certificate\_File>  
<Certificate\_File>为刚才下载的证书(charles.pem)，这个路径为绝对路径

![b03fe3963f2dc2af3e8d0826892ff0fa.png][]

然后将 charles.pem 这个文件改为 生成的数字加.0,例如

![0bdf489d572703eb014f9dfad60c9f1c.png][]

5.然后在用前端根证书导入的方法导入证书  
adb root  
adb remount  
adb push 0505096d.0 /etc/security/cacerts/  
adb shell chmod 644 /etc/security/cacerts/0505096d.0

如果remount或push失败，需要执行以下命令  
adb disable-verity  
adb reboot

6.以上方法一般可以抓到了，如果还是不行，需要配置 Proxy——SSL Proxying Settings——SSL Proxying，勾选Enable ——SSL Proxying，点击“add”，将Host和Port配置为\*，如下图所示：

![20ee09b265bed247b3765af34fe0f3f6.png][]

=========================================================================================================

### 给Android7及以上的手机安装系统级证书，实现HTTPS的抓包 ###

Android7以后，系统不再信任用户级的证书，只信任系统级的证书，所以要抓包就需要把我们的代理程序证书安装至Android的系统目录中

#### 准备 ####

*  一台已root的手机
 *  Openssl

#### 证书生成 ####

![128f8396554c338c220337bb2414a750.png][]

![db320ea6f103fab202753483ee5121e0.png][]

![423b3031c4bbf42d1f0199d3eccf8890.png][]

执行命令：C:\\Users\\del>cd C:\\Users\\del\\Desktop

执行命令：C:\\Users\\del\\Desktop>openssl x509 -subject\_hash\_old -in Charles.pem

![5ee992e2d2654fd696f41194444ec802.png][]

然后改名：

![07e5a0a5993df6c01a3620018a897339.png][]

#### 将新证书放入手机系统证书目录 ####

手机系统目录位置是：

> /system/etc/security/cacerts

需要拷贝至此目录必须拥有root权限

#### 重启Android设备以生效 ####

拷贝证书至`/system/etc/security/cacerts`之后，重启手机就可以使证书生效了

5.然后在用前端根证书导入的方法导入证书  
adb root  
adb remount  
adb push 0505096d.0 /etc/security/cacerts/  
adb shell chmod 644 /etc/security/cacerts/0505096d.0

如果remount或push失败，需要执行以下命令  
adb disable-verity  
adb reboot

![8010fb52fd0199e4e33335b4b68412b0.png][]

[https_blog.csdn.net_djzhao627_article_details_102812783_utm_medium_distribute.pc_relevant.none-task-blog-BlogCommendFromMachineLearnPai2-1.nonecase_depth_1-utm_source_distribute.pc_relevant.none-task-blog-BlogCommendFromMachineLearnPai2-1.nonecase]: https://blog.csdn.net/djzhao627/article/details/102812783?utm_medium=distribute.pc_relevant.none-task-blog-BlogCommendFromMachineLearnPai2-1.nonecase&depth_1-utm_source=distribute.pc_relevant.none-task-blog-BlogCommendFromMachineLearnPai2-1.nonecase
[https_www.cnblogs.com_duobazi_p_11588993.html]: https://www.cnblogs.com/duobazi/p/11588993.html
[https_blog.csdn.net_ShadowySpirits_article_details_79756274]: https://blog.csdn.net/ShadowySpirits/article/details/79756274
[83a19d87bc6c1609ec92a65bb8253c3f.png]: https://img-blog.csdnimg.cn/img_convert/83a19d87bc6c1609ec92a65bb8253c3f.png
[395cbfd035fa610c3cd3c65a3b6666dc.png]: https://img-blog.csdnimg.cn/img_convert/395cbfd035fa610c3cd3c65a3b6666dc.png
[http_slproweb.com_products_Win32OpenSSL.html]: http://slproweb.com/products/Win32OpenSSL.html
[445e9b00315cde61c67caea8b4d00dd2.png]: https://img-blog.csdnimg.cn/img_convert/445e9b00315cde61c67caea8b4d00dd2.png
[b03fe3963f2dc2af3e8d0826892ff0fa.png]: https://img-blog.csdnimg.cn/img_convert/b03fe3963f2dc2af3e8d0826892ff0fa.png
[0bdf489d572703eb014f9dfad60c9f1c.png]: https://img-blog.csdnimg.cn/img_convert/0bdf489d572703eb014f9dfad60c9f1c.png
[20ee09b265bed247b3765af34fe0f3f6.png]: https://img-blog.csdnimg.cn/img_convert/20ee09b265bed247b3765af34fe0f3f6.png
[128f8396554c338c220337bb2414a750.png]: https://img-blog.csdnimg.cn/img_convert/128f8396554c338c220337bb2414a750.png
[db320ea6f103fab202753483ee5121e0.png]: https://img-blog.csdnimg.cn/img_convert/db320ea6f103fab202753483ee5121e0.png
[423b3031c4bbf42d1f0199d3eccf8890.png]: https://img-blog.csdnimg.cn/img_convert/423b3031c4bbf42d1f0199d3eccf8890.png
[5ee992e2d2654fd696f41194444ec802.png]: https://img-blog.csdnimg.cn/img_convert/5ee992e2d2654fd696f41194444ec802.png
[07e5a0a5993df6c01a3620018a897339.png]: https://img-blog.csdnimg.cn/img_convert/07e5a0a5993df6c01a3620018a897339.png
[8010fb52fd0199e4e33335b4b68412b0.png]: https://img-blog.csdnimg.cn/img_convert/8010fb52fd0199e4e33335b4b68412b0.png