Configure the forward proxy to intercept HTTPS traffic
The following is only required if both:
The proxy is configured as a forward proxy
Recording HTTPS traffic is desired
To enable recording HTTPS traffic, we first must trust Stoobly agent to be a certificate authority. To do so, you will need to add the CA certificate generated by Stoobly as a trusted certificate authority.
System Wide Configuration
Some applications (e.g. browsers) will require additional specific configuration. Please refer to their documentation.
Automated Setup
In the terminal run the following command:
stoobly-agent ca-cert install
This installs the CA certificate under System in Keychain Access. To find the certificate file path, use:
stoobly-agentca-certshow--formatcer
In the terminal run the following command:
stoobly-agent ca-cert install
This will run Linux distribution specific commands to install the CA cert. We currently support the following distributions:
Debian based ones, such as Ubuntu
RHEL based ones, such as CentOS
Manual Setup
Get the certificate path:
stoobly-agentca-certshow--formatcer
This outputs the path to the certificate file (e.g. ~/.stoobly/ca_certs/mitmproxy-ca-cert.cer).
Open Keychain Access and click the + button in the top left corner
Select the certificate file using the path from step 1
Double-click the newly added row mitmproxy
Click the dropdown next to When using this certificate, and select Always Trust
Get the certificate path:
stoobly-agentca-certshow--formatpem
This outputs the path to the certificate file (typically ~/.stoobly/ca_certs/mitmproxy-ca-cert.pem).
Install the certificate for your Linux distribution using the certificate path from step 1:
Most browsers use the system certificate store, so after running stoobly-agent ca-cert install, Chrome, Edge, and Safari should automatically trust the CA certificate. Firefox uses its own certificate store and requires manual configuration.
Chrome and Edge use the system certificate store. After installing the CA certificate system-wide with stoobly-agent ca-cert install, these browsers should automatically trust it.
