Enable HTTPS Traffic

Configure the forward proxy to intercept HTTPS traffic

The following is only required if both:

• The proxy is configured as a forward proxy

• Recording HTTPS traffic is desired

To enable recording HTTPS traffic, we first must trust Stoobly agent to be a certificate authority. To do so, you will need to add the CA certificate generated by Stoobly as a trusted certificate authority.

System Wide Configuration

Some applications (e.g. browsers) will require additional specific configuration. Please refer to their documentation.

Automated Setup

Mac

In the terminal run the following command:

stoobly-agent ca-cert install

This installs the CA certificate under System in Keychain Access. To find the certificate file path, use:

stoobly-agent ca-cert show --format cer

Linux

Manual Setup

Mac

1. Get the certificate path:

   stoobly-agent ca-cert show --format cer

   This outputs the path to the certificate file (e.g. ~/.stoobly/ca_certs/mitmproxy-ca-cert.cer).

2. Open Keychain Access and click the + button in the top left corner

3. Select the certificate file using the path from step 1

4. Double-click the newly added row mitmproxy

5. Click the dropdown next to When using this certificate, and select Always Trust

Linux

Browser Configuration

Most browsers use the system certificate store, so after running stoobly-agent ca-cert install, Chrome, Edge, and Safari should automatically trust the CA certificate. Firefox uses its own certificate store and requires manual configuration.

Chrome / Edge

Chrome and Edge use the system certificate store. After installing the CA certificate system-wide with stoobly-agent ca-cert install, these browsers should automatically trust it.

Verification:

1. Start Stoobly agent: stoobly-agent run

2. Configure your browser to use the proxy (see Forward Proxy configuration)

3. Visit an HTTPS site (e.g., https://example.com)

4. If no certificate warning appears, the CA certificate is properly trusted

If you see certificate warnings:

• Ensure you ran stoobly-agent ca-cert install with administrator privileges

• Restart your browser after installing the certificate

• On macOS, verify the certificate is trusted in Keychain Access

Firefox

Safari