Using Charles Proxy to test Apps and Websites using SSL

Note: If you’re new to Charles Proxy, you may need to read my earlier post on Using Charles Proxy for bandwidth throttling testing to get started on this.

Update: There is now also a Charles Proxy iOS app, which allows you to do the following:

Capture HTTP and HTTPS network traffic on your device
SSL Proxying so you can view your SSL / TLS requests in plain text
View requests and responses in the app, or share each request or a whole session to Charles on your desktop

Many apps and websites now use Secure Sockets Layer (SSL) to encrypt communications between clients and servers.

In order to test these with Charles Proxy, some extra steps need to completed.

1. A Charles Proxy certificate needs to installed on the client side – either on the mobile device using the app or the system using the SSL website.
2. In Charles Proxy itself, the option SSL Proxying Settings is used to enable and setup SSL Proxying.

Here are some example setups:

To use Charles Proxy with an app using SSL

1. Setup the test device e.g. iPhone to use Charles Proxy, as shown in https://www.patwalsh.co.uk/using-charles-proxy-for-bandwidth-throttling-testing/
2. Follow the instructions in https://www.charlesproxy.com/documentation/using-charles/ssl-certificates/ to setup a Charles Proxy certificate on the test device
3. Setup Charles Proxy with the SSL Proxy Settings for the required server, which maybe be done using a server name (e.g. *.domain.com) and/or an API (e.g. api.domain.com) and make sure Enable SSL Proxying is ticked

With all these three items setup, you should then be able to use Charles Proxy with an app using SSL.

To use Charles Proxy with a website using SSL

1. Follow the instructions in https://www.charlesproxy.com/documentation/using-charles/ssl-certificates/ to setup a Charles Root Certificate on the browser/system you’ll be browsing the SSL site from
2. Setup Charles Proxy with the SSL Proxy Settings for the required server and make sure Enable SSL Proxying is ticked

You should then be able to use Charles Proxy with a website using SSL

I’ve also added a post on Using Charles Proxy to test different HTTP Server Response Codes

About my testing services: iOS App Testing / Android App Testing / Website Testing

Pat performs comprehensive website testing for us, across all the main browsers and platforms, including mobile devices. His flexible approach to testing and clear feedback enable us to have confidence that the business end of our website is still working smoothly after system updates and changes.

Steve Liu, Manager, Wicked Lasers

Pat came to Composed to respond to our (increasingly urgent) need of QA on mobile and web and I can testify he more than fulfilled the task. On the Android side, his very structured approach (first exploratory testing, then focus on defining test plans for a variety of scopes) and his clear knowledge of the latest mobile technologies have quickly paid off. He was involved directly with the developers (including myself) and this very dynamic relationship enabled us to annihilate bugs swiftly and efficiently.

David Ferrand, Android Developer, Composed

We’ve worked with Pat Walsh on a number of very different projects, from interactive video projects to mobile apps. His work is very thorough and has quickly become an essential and important phase of all the production work we do at Storythings. He’s thorough, diligent, and a pleasure to work with.

Matt Locke, Director, Storythings

Couldn’t recommend Pat highly enough. He goes beyond what you’d expect of a QA tester, commenting more broadly on user experience and even design. He’s quick, efficient and thorough – couldn’t ask for any more.

Rob Calvert, Director, Click

Pat is an excellent one-stop-shop for testing Apps and Websites. He is a self-starter who just knows what needs to be done and gets on with it, and is responsive to requests for any specific testing requirements. He provides test plans and reports as a matter of course and was a pleasure to work with. I will definitely be working with Pat again if the opportunity arises.

Andrew Birley, PM, Storythings

Pat Walsh provided Kingston Valdes with a professional and personable service that was excellent value. The site was built and tested quickly, we are delighted with the results, and we have already had positive feedback from some of our clients. If you’re thinking of building a new site or adapting an existing one, I’d certainly recommend speaking with Pat about it.

Kathy Valdes, Kingston Valdes

Pat has been absolutely incredible at testing each of our projects he works on. He’s very professional, organised and diligent. I look forward to using him again in the future.

Oliver Thurtle, Director of Technology, Drum

Pat Walsh fixed my site within hours of my contacting him – his WordPress website fix service clearly works!

Douglas Green, Douglas Software

We hired Pat to help with QA of a music streaming app. We needed someone with that magic “6th sense” of where the bugs are lurking; the ones which developers tend to miss. Pat more than fulfilled this need, with highly methodical approach and a great eye for detail.

Subsequently Pat has provided QA services for a personal app project of mine, finding a significant issue which had been lurking for some time.

Pat is a real asset to any team – highly competent technically but also easy going and a great guy to work with. Highly recommended!

Andrew Ebling, Head of App Development, Composed

Using Charles Proxy to test Apps and Websites using SSL

Using Charles Proxy to test Apps and Websites using SSL

Share this to social media...