Hi,

I have nearly the same issue as in the topic "Can’t see the contents of HTTP Tunnel to port 443" discussed. But the difference is: while tunneling through fiddler, the app is not working properly. I inspected the packets with wireshark and when I am using fiddler, then the connection will be closed from client-side (fiddler) right after the "server hello" message. The last packet before the clientside FIN is the "change cipher spec, encrypted handshake message".

If I am not using fiddler as man in the middle, then everything works fine (hello, key exchange, change cipher spec, application data).

So it seems that fiddler closes the connection before all the data is exchanged. why?

With other connections (like google) fiddler works as expected, right after the connect message i can see the decrypted https traffic.

My setup is the following: I have MEmu (android emu) running on a windows machine and inside MEmu I configured my local machine on 8888 as proxy. This is working, if I google something from inside memu, everything is fine in fiddler. But if I use my app from inside memu, then the explained failure occures. 

Any help will be appreciated!

Thanks!

I checked the emulator version, it was 5.1, so it should not be the reason you mentioned. I also checked the logs in fiddler, it sais: "SecureClientPipeDirect failed: System.Security.Authentication.AuthenticationException Fehler bei SSPI-Aufruf"

I checked with wireshark, it is not the server who is closing the connection. It is fiddler who is the first one sending the FIN|ACK packet to the server.

Here is the packet order (not complete, just the important ones), maybe it is interesting:

1. client->server: Client Hello

2. server->client: Server Hello, Change Cipher Spec, Encrypted Handshake Message

3. client->server: Change Cipher Spec, Encrypted Handshake Message

4. client->server: FIN,ACK

Meanwhile I will read the documents you have linked. Thanks!

Stop, the list wasn't complete: