Charles 4.2.1能否在旧版Android系统中抓取第三方应用的网络流量？

Hey there, let me break down the issue you're facing with Charles 4.2.1 and Android devices:

Android Version-Specific Restrictions #

You mentioned being able to capture ping packets from third-party apps on Android 6, and that's totally expected—Android 6 and older versions trust user-installed CA certificates (like the one generated by Charles) by default. But starting with Android N (API 24), Google tightened security: apps will only trust pre-installed system CA certificates out of the box, and won't honor manually added user certificates. That's exactly why your third-party app packet capturing stops working on newer Android versions.

Official Fix (Only for Apps You Control) #

As per Charles' documentation, to get an app to trust its SSL proxy certificate, you need to add a Network Security Configuration to the app:

1. Create a network_security_config.xml file in your app's res/xml directory with this content:

   <?xml version="1.0" encoding="utf-8"?>
   <network-security-config>
       <base-config>
           <trust-anchors>
               <!-- Keep trusting system certificates -->
               <certificates src="system" />
               <!-- Add trust for user-installed certificates (Charles' cert) -->
               <certificates src="user" />
           </trust-anchors>
       </base-config>
   </network-security-config>
   

2. Reference this config in your app's AndroidManifest.xml under the <application> tag:

   <application
       ...
       android:networkSecurityConfig="@xml/network_security_config">
       ...
   </application>
   

   Important note: This only works for apps you develop and have source code access to. Third-party apps won't include this configuration, so you can't force them to trust Charles' certificate via this method.

What About Third-Party Apps? #

If you absolutely need to capture SSL traffic from third-party apps, there's no official, secure way to do this. Some workarounds involve rooting your device and modifying the system certificate store, but this poses significant security risks and becomes harder with each new Android release as security measures get stronger.

内容的提问来源于stack exchange，提问作者plonsker