Common Problems – iOS

Here are some of the common issues people face when working with iOS and Charles. Details on how to fix these issues has also been included.


# Trust device’s Root certificate

I’ve installed the Root certificate and ‘Enabled SSL Proxying’ but the Response is empty or blank

If you have decrypted the SSL traffic but the Response is empty, it may mean you haven’t trusted the device’s root certificate

How to fix it?

Settings -> General -> About -> Certificate Trust Settings -> enable the toggle for the Root certificate

# Time Outs

The app or browser keeps timing out

Check if the local IP address of your Mac has changed

If it has changed, it means your device can no longer talk to your Mac. Essentially your iOS device has no internet connection!

# Access Denied

My IP address hasn’t changed and I still can’t see traffic from my device on Charles

If you see a message in the bottom left-hand corner of Charles about ‘Denying access ….’, the fix is actually quiet straightforward

Restart Charles. Return to your browser/app and reload the page/screen

Go back to Charles and you should now see a dialog (see next screenshot below) about accepting a connection from you device

Click ‘Allow’

Why did this happen?

This error can occur if you dismiss the dialog (by clicking the red circle) or accidentally click ‘Deny’ button

The dialog message says “If you deny this you will not be asked again for this host address until you restart Charles”.

Managing local IP address

The ‘Access Control Settings’ screen lists the local IP addresses of all devices that can communicate with your instance of Charles

# Expired MacOS/iOS Root Certificate

Charles has stopped decrypting traffic!

To comply with Apple’s changes to certificate expiry dates, from Charles 4.6 onwards, all certs will have a 1 year expiry date

Read this article to create a new cert

TL;DR – “reset” the Charles root cert

# Using a work laptop

I’ve done everything and Charles STILL doesn’t connect

If you are using a work laptop and Charles still isn’t working, check if there is any pre-install software that could stop Charles from working e.g. Zscaler, Cisco Umbrella

If allowed, turn off each application one by one to see if that resolves the problem

The Zscaler icon is highlighted in the adjacent screenshot

7 thoughts on “Common Problems – iOS

      1. Thanks for your prompt reply!!

        I tried all the steps as mentioned in above shared link however unfortunately unable to fix it.

        Like

  1. Hello everyone!
    I’m trying to set up my iOS device with Charles and I’m facing some strange things:
    1. Today is the Dec, 21th 2021 but the certificate I’m downloading has an expiration date of 29 November 2021
    2. I’ve downloaded the profile and marked the certificated as trusted but still see an empty response (like if the root certificate is not trusted)
    I did the same on Android the same day and everything works.
    Is the expired certificate may cause this issue? How to get a fresh one?
    thanks!

    Like

    1. Hi Daria, I’ve done a bit a research and it looks like, since September 2020, Apple now forces certificates to have 1 year expiry dates, read article. I also had a look at the Charles Proxy release notes for 4.6 and it says “Fix new SSL CA certificates to be compatible with iOS and macOS changes”. I’ll add a new section to this page to cover this specific issue. Thanks for highlighting it (I wasn’t aware of this change until now!)

      Like

    2. Hi Daria, to fix your issue, in Charles, if you go to Help -> SSL Proxying -> Reset Charles Root Certificate… and then follow the prompts it should issue you with a new root certificate. Alternatively, delete the root cert from Keychain and install a new one

      Like

Leave a Reply to Anil K Saini Cancel reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: