Add SSL certificate exception while proxy session

问题:

I'm trying to record a session via Jmeter/Burpsuite for and Android or iOS App which interact with an HTTPS API requests e.g. https//api.server.com/login

We can add the exception of SSL if using a Browser, But how can we do so while doing proxy on App for Android/iOS.

回答1:

The easy way is sending the certificate to yourself by email, opening the email on the mobile device and installing the certificate using system dialog.

The certificate file is ApacheJMeterTemporaryRootCA.crt and it's being generated in the "bin" folder of your JMeter installation when you start HTTP(S) Test Script Recorder

As an alternative can also consider using Mobile Recorder service, in that case you will be automatically guided through dummy certificate installation process. Moreover, it can export JMeter tests in so-called "SmartJMX" mode - with automatic correlation applied so you won't have to waste your time on developing Regular Expressions to work around dynamic parameters