Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ru.sberbankmobile doesn't work in manual proxy mode #545

Closed
Eugene-Savenko opened this issue May 11, 2016 · 5 comments

Comments

@Eugene-Savenko
Copy link
Member

commented May 11, 2016

ru.sberbankmobile - находится в списке исключений

При включенном adguard не запускается теперь Сбербанк онлайн приложение. Пишет — не удается создать защищенное подключение. Работает только если убрать в соединении настройку прокси localhost:8080. До обновления проблемы не было

"proxyMode" : true,
"proxyPort" : 8080,
"proxySetupManualMode" : true,

логи тут

@Eugene-Savenko

This comment has been minimized.

Copy link
Member Author

commented May 11, 2016

@ameshkov ameshkov added Bug SSL labels May 15, 2016
@ameshkov ameshkov added this to the 2.6 milestone May 15, 2016
@Revertron

This comment has been minimized.

Copy link
Member

commented Jun 1, 2016

I think the situation is like this:
We added ru.sberbankmobile to net exclusions.
But, in manual proxy mode all apps (that use standard HttpUrlConnection) go through proxy.
The sberbank app is connecting to our proxy, and, because we have no exclusion for domain or package name in ssl_exclusions (only net_exclusions) we are trying to MITM its connects.

There are two paths to correct such problems:

  1. We add package names to 2 lists - net_exclusions and ssl_whitelist.
    or
  2. Before MITM'ing we check if that app is in net_exclusion (those apps will not be mitmed).

I personally prefer second path.

@ameshkov

This comment has been minimized.

Copy link
Member

commented Jun 1, 2016

Second way it is

@Revertron

This comment has been minimized.

Copy link
Member

commented Jun 1, 2016

Okay, I've made a fix, we need to check it.

@gshumihin

This comment has been minimized.

Copy link

commented Jun 6, 2016

Works fine for both VPN and manual Proxy.

@gshumihin gshumihin closed this Jun 6, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
4 participants
You can’t perform that action at this time.