I am attempting to check our Android app's SSL Certificate Validation.
I have MITM Proxy running on my Mac and am using the Mac as a Proxy for my Android phone. I can see all of the Android's http/s requests in MITM Proxy on the Mac.
Looking at the CERT Tapioca intro (http://www.cert.org/blogs/certcc/post.cfm?EntryID=203) it says, near the bottom of the page:
As I mentioned previously, if you ever see an https:// URL in mitmproxy, you're either dealing with an application that fails to validate SSL certificate chains or you have manually accepted the invalid certificate. We can easily check for this programmatically:
grep "scheme,5:https" ~/logs/flows.log
This command determines whether the client successfully sent or retrieved data through the HTTPS connection.
Can someone explain how this command "determines whether the client successfully sent or retrieved data through the HTTPS connection" ? As far as I can tell, that command only finds instances of "scheme,5:https" in the log file... but how do I then use that information to understand what is going on?