search

Enable HTTPS Traffic

Configure the forward proxy to intercept HTTPS traffic

circle-info

The following is only required if both:

  • The proxy is configured as a forward proxy

  • Recording HTTPS traffic is desired

To enable recording HTTPS traffic, we first must trust Stoobly agent to be a certificate authority. To do so, you will need to add the CA certificate generated by Stoobly as a trusted certificate authority.

hashtag
System Wide Configuration

circle-info

Some applications (e.g. browsers) will require additional specific configuration. Please refer to their documentation.

hashtag
Automated Setup

In the terminal run the following command:

stoobly-agent ca-cert install

This installs the CA certificate under System in Keychain Access. To find the certificate file path, use:

stoobly-agent ca-cert show --format cer

hashtag
Manual Setup

  1. Get the certificate path:

    stoobly-agent ca-cert show --format cer

    This outputs the path to the certificate file (e.g. ~/.stoobly/ca_certs/mitmproxy-ca-cert.cer).

  2. Open Keychain Access and click the + button in the top left corner

  3. Select the certificate file using the path from step 1

  4. Double-click the newly added row mitmproxy

  5. Click the dropdown next to When using this certificate, and select Always Trust

hashtag
Browser Configuration

Most browsers use the system certificate store, so after running stoobly-agent ca-cert install, Chrome, Edge, and Safari should automatically trust the CA certificate. Firefox uses its own certificate store and requires manual configuration.

Chrome and Edge use the system certificate store. After installing the CA certificate system-wide with stoobly-agent ca-cert install, these browsers should automatically trust it.

Verification:

  1. Start Stoobly agent: stoobly-agent run

  2. Configure your browser to use the proxy (see Forward Proxy configuration)

  3. Visit an HTTPS site (e.g., https://example.com)

  4. If no certificate warning appears, the CA certificate is properly trusted

If you see certificate warnings:

  • Ensure you ran stoobly-agent ca-cert install with administrator privileges

  • Restart your browser after installing the certificate

  • On macOS, verify the certificate is trusted in Keychain Access

PreviousForward ProxyNextReverse Proxy

Last updated