Without this visibility it is difficult and time-consuming to determine exactly where the fault is. In Web and Internet development you are unable to see what is being sent and received between your web browser / client and the server. Your web browser (or any other Internet application) is then configured to access the Internet through Charles, and Charles is then able to record and display for you all of the data that is sent and received. See SSL Certificates for instructions for trusting Charles’s Root Certificate.Charles is a web proxy (HTTP Proxy / HTTP Monitor) that runs on your own computer. You will see a warning in your browser, or other application, when it receives that certificate because the Charles Root Certificate is not in your list of trusted root certificates. Trusting Charles's SSL CertificatesĬharles generates its own certificates for sites, which it signs using a Charles Root Certificate. If you want to SSL Proxy all host names then enter * into the host names list in the SSL Proxying Settings. You can also right-click on a host name in the structure view and turn on or off SSL Proxying.Īfter adding a host name to the SSL Proxying list you may need to restart Charles for existing browser sessions to change. The list is in the Proxy Settings, SSL tab. You must specifically identify the host names you want to enable SSL Proxying on. With SSL proxying turned off Charles just forwards all SSL traffic directly to the target web server. You may turn on or off this SSL proxying in the Proxy Preferences. This functionality is essential for debugging secure (SSL) web applications.

The communication is SSL (encrypted) from web browser to Charles and also SSL (encrypted) from Charles to the web server.

If you add the Charles CA Certificate to your trusted certificates you will no longer see any warnings – see below for how to do this.Ĭharles still communicates via SSL to the web server. Therefore you will see a security warning, indicating that the root authority is not trusted. Charles receives the server’s certificate, while your browser receives Charles’s certificate. Instead of your browser seeing the server’s certificate, Charles dynamically generates a certificate for the server and signs it with its own root certificate (the Charles CA Certificate). Charles can be used as a man-in-the-middle HTTPS proxy, enabling you to view in plain text the communication between web browser and SSL web server.Ĭharles does this by becoming a man-in-the-middle.

Instal the new for ios Charles 4.6.5