Enable HTTPS Traffic

Configure the forward proxy to intercept HTTPS traffic

The following is only required if both:

• The proxy is configured as a forward proxy

• Recording HTTPS traffic is desired

To enable recording HTTPS traffic, we first must trust Stoobly agent to be a certificate authority. To do so, you will need to add the certificate generated by mitmproxy as a trusted certificate authority. Our agent uses mitmproxy internally to handle the heavy lifting of proxying requests.

System Wide Configuration

Some applications (e.g. browsers) will require additional specific configuration. Please refer to their documentation.

Automated Setup

Mac

In the terminal run the following command:

stoobly-agent ca-cert install

This installs ~/.stoobly/ca_certs/mitmproxy-ca-cert.cer under System in Keychain Access.

Linux

In the terminal run the following command:

stoobly-agent ca-cert install

This will run Linux distribution specific commands to install the CA cert. We currently support the following distributions:

• Debian based ones, such as Ubuntu

• RHEL based ones, such as CentOS

Manual Setup

Mac

1. Open Keychain Access and click the + button in the top left corner 2. Select ~/.stoobly/ca_certs/mitmproxy-ca-cert.cer 3. Double-click the newly added row mitmproxy 4. Click the dropdown next to When using this certificate, and select Always Trust

Linux

Please refer to the following mitmproxy docs for your specific Linux distribution: https://docs.mitmproxy.org/stable/concepts-certificates/

Browser Configuration

Chrome

https://docs.vmware.com/en/VMware-Adapter-for-SAP-Landscape-Management/2.1.0/Installation-and-Administration-Guide-for-VLA-Administrators/GUID-D60F08AD-6E54-4959-A272-458D08B8B038.html

Firefox

https://docs.vmware.com/en/VMware-Adapter-for-SAP-Landscape-Management/2.1.0/Installation-and-Administration-Guide-for-VLA-Administrators/GUID-0CED691F-79D3-43A4-B90D-CD97650C13A0.html