[Other SmartWatches] R a p h i:
Ok, after many tests and disappointments, the only way to update today is by using Charles Proxy with his personal certificate (that you created during installation) and SSL unpinning by frida server installed on the smartphone. It's not easy to set up but I got there.

if anyone is interested I will do a little tutorial.. :censored:

..Otherwise, to put it simply :ROFLMAO:

That is (all) the files you need (with some remarks..) :

I use this rewriting rules script in Charles (11.0.4.20.txt) :

{
"status": "0",
"components": [{
"name": "com.huawei.KAN-B19.firmware",
"version": "11.0.4.20",
"versionID": "522947",
"description": "",
"ruleAttr": "",
"createTime": "2021-02-22T07:02:24+0000",
"url": "http://update.dbankcdn.com/download/data/pub_13/HWHOTA_hota_900_9/66/v3/FxtqoIeNR0O9BPFdmXXpDA/",
"size": "194453487"
}]
}

But you can download and import this rewrite settings i use in Charles :

/

'--> 11.0.4.20-dre.xml

When you first installing Charles Proxy server,

you must create your own SSL certificate (and must install it

in the trusted root certificate location under Windows) :

During the first tests, I had to install this certificate (converted in <hash>.0) in the android trusted system certificates (you need root device).

.cer (DER) to .pem conversion :

openssl x509 -inform DER -in certificat.cer -out certificat.pem

openssl x509 -inform PEM -subject_hash_old -in certificat.pem

/

'-> We can read the Hash at the beginning

Then rename certificat.pem by Hash.0

You can now copy it to /system/etc/security/cacerts/ (root)

And reboot the phone to take effet.

After reboot, you'll have a new certificate (system) named :

XK72 Ltd (Charles is developed by XK72)

Charles Proxy CA

My Charles proxy configuration differs very little from that of Lokotoai :

/

'-> Only one url changed (added) and all the three urls

are included through the SSL Proxying settings of Charles

like this :

I have some problems with ProxyDroid v2.7.7 which is a global client proxy using IP Tables (root) but no SSL paquets were decrypted..

I use Super Proxy v1.0.0 (VPN) now and it works.

So I could decrypt SSL network paquets from (old) browsers and few application but not with Huawei Health..

I then finally decided to use the method with the Frida server.

The final command line is :

frida -U -f com.huawei.health -l fridassl.js --no-pause

"--no-pause" argument error :

the application is no longer paused by default on start-up.

You therefore no longer need the --no-pause argument.

If you do want to pause the app on start-up, you can use --pause

List running apps :

frida-ps -U -a

I use this SSL unpinning script :

/

'-> Universal Android SSL pinning bypass with Frida

'---> fridassl.js

The only files you need on the device are :

/data/local/tmp/cert-der.crt (Charles.crt renamed)

/data/local/tmp/fridaserver (server to launch from root terminal or adb)

fridaserver needs chmod 755 or 777 (I used 777)

.cer (DER) to .crt conversion (for frida js script):

openssl x509 -inform DER -in certificat.cer -out certificat.crt

Now, all is decrypted in Charles ! :D

let's see what this will do.. :p

Finally the Stopwatch with Lap times !!! (y)

Up to 20 memorized intermediate times (practice for athletics !) :

A Honor GS Pro well updated !!! :giggle:

Step By Step Procedure :LOL: (if you need..) :