SSL decrypt not working with Fiddler

[AlexGuo1998]

As far as I know, Fiddler generates certificates using hostname in CONNECT message, rather than from SNI.
Now when we send CONNECT, we may have not retrieved the hostname from SNI, making the certificate unusable. (i.e. CN=some IP address)
I suggest CONNECT be delayed to the Client Hello message. A quick fix can be:

TunProxy/android_app/app/src/main/cpp/tcp.c

Lines 732 to 735 in d68818a

	if (cur->tcp.connect_sent == TCP_CONNECT_NOT_SENT) {
	if (len > 0) {
	char buffer[512];
	sprintf(buffer, "CONNECT %s:443 HTTP/1.0\r\n\r\n", cur->tcp.hostname);

Change if (len > 0) to if (len > 0 && datalen > 0).
This assumes we got some data before CONNECT, which is likely to be Client Hello.

BTW thanks for the application! It helped me a lot.