{"action":"created","issue":{"url":"https://api.github.com/repos/mitmproxy/mitmproxy/issues/472","labels_url":"https://api.github.com/repos/mitmproxy/mitmproxy/issues/472/labels{/name}","comments_url":"https://api.github.com/repos/mitmproxy/mitmproxy/issues/472/comments","events_url":"https://api.github.com/repos/mitmproxy/mitmproxy/issues/472/events","html_url":"https://github.com/mitmproxy/mitmproxy/issues/472","id":57096092,"number":472,"title":"Requests to Exchange servers with optional client certificate authentication fail","user":{"login":"iragsdale","id":53177,"avatar_url":"https://avatars.githubusercontent.com/u/53177?v=3","gravatar_id":"","url":"https://api.github.com/users/iragsdale","html_url":"https://github.com/iragsdale","followers_url":"https://api.github.com/users/iragsdale/followers","following_url":"https://api.github.com/users/iragsdale/following{/other_user}","gists_url":"https://api.github.com/users/iragsdale/gists{/gist_id}","starred_url":"https://api.github.com/users/iragsdale/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iragsdale/subscriptions","organizations_url":"https://api.github.com/users/iragsdale/orgs","repos_url":"https://api.github.com/users/iragsdale/repos","events_url":"https://api.github.com/users/iragsdale/events{/privacy}","received_events_url":"https://api.github.com/users/iragsdale/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/mitmproxy/mitmproxy/labels/bug","name":"bug","color":"f7c6c7"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":15,"created_at":"2015-02-09T21:56:26Z","updated_at":"2015-03-08T21:03:05Z","closed_at":"2015-03-07T00:31:38Z","body":"When I try to examine the conversation between an iPhone and an Exchange server configured with optional client certificate authentication, mitmproxy fails to make requests to the Exchange server.\r\n\r\nI just see this error for the request: “← TCP connection closed unexpectedly”. However, if I disable the proxy in the iOS settings, requests succeed just fine.\r\n\r\nIf I attempt to make the same request with curl, I get \"curl: (35) Server aborted the SSL handshake\". If I connect to the server using openssl s_client, I can make valid requests.\r\n\r\nIf I change the server's authentication policy from \"Accept client certificates\" to \"Ignore client certificates\", mitmproxy works just fine.\r\n\r\nSo, it appears that mitmproxy (and curl) are doing something different in how they negotiate an SSL connection with the remote server. I'm not sure exactly what it might be, but it would be nice if it worked in that scenario. "},"comment":{"url":"https://api.github.com/repos/mitmproxy/mitmproxy/issues/comments/77774085","html_url":"https://github.com/mitmproxy/mitmproxy/issues/472#issuecomment-77774085","issue_url":"https://api.github.com/repos/mitmproxy/mitmproxy/issues/472","id":77774085,"user":{"login":"GordonMcKinney","id":4955046,"avatar_url":"https://avatars.githubusercontent.com/u/4955046?v=3","gravatar_id":"","url":"https://api.github.com/users/GordonMcKinney","html_url":"https://github.com/GordonMcKinney","followers_url":"https://api.github.com/users/GordonMcKinney/followers","following_url":"https://api.github.com/users/GordonMcKinney/following{/other_user}","gists_url":"https://api.github.com/users/GordonMcKinney/gists{/gist_id}","starred_url":"https://api.github.com/users/GordonMcKinney/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/GordonMcKinney/subscriptions","organizations_url":"https://api.github.com/users/GordonMcKinney/orgs","repos_url":"https://api.github.com/users/GordonMcKinney/repos","events_url":"https://api.github.com/users/GordonMcKinney/events{/privacy}","received_events_url":"https://api.github.com/users/GordonMcKinney/received_events","type":"User","site_admin":false},"created_at":"2015-03-08T21:03:05Z","updated_at":"2015-03-08T21:03:05Z","body":"SUCCESS - I have run a very narrow test for a single IIS Client Cert URL... 0.11.4 works and 0.11.3 fails.\r\n\r\nI tried building OS X binaries but the instructions and scripts fail. I'm not sure the docs are updated correctly. @mhils can you poke the volunteer that built the OS X bin? or put me in touch with him/her so I can learn what I'm doing wrong?"}}