Text only | Text with Images

OPNsense Forum

English Forums => Web Proxy Filtering and Caching => Topic started by: pheriko on September 21, 2024, 05:50:45 AM

Title: (SOLVED)Trust: Authorities where is the .cert file?
Post by: pheriko on September 21, 2024, 05:50:45 AM
Hello.

  For squid MITM we need CA Auth, I create one and see 2 files to downoad [crt,key].pem, which one I need to download and install on my browsers?

  Last thing, a lot of manuals show the option to download .crt key, but in my case I don't see that option, is gone or is a bug?

  Running OPNsense 24.7.4_1-amd64
 
 
Title: Re: Trust: Authorities where is the .cert file?
Post by: Patrick M. Hausen on September 21, 2024, 12:17:45 PM
The certificate is what client devices must trust.
Title: Re: Trust: Authorities where is the .cert file?
Post by: pheriko on September 25, 2024, 06:15:10 PM
 I had seen how, thanks master.
Title: Re: (SOLVED)Trust: Authorities where is the .cert file?
Post by: vivekmauli14 on December 26, 2024, 01:33:58 PM
Hi,

I tried installing mitmproxy on opnsense but couldn't as I didn't found any pkg in the repositories. Then I created a new Debian server with mitmproxy and added a NAT rule from Firewall> NAT> Port Forward. My certificate is created on the debian server using mitmproxy > certs. Still clients not able to trust the installed certificate even when I have put the certificate in the Trusted root C A in certmgr.msc.

Any idea on what might be going wrong here? or How can I do MITM in opnsense as I think maybe squid will require its v7 which will be released in June '25. I was hoping MITM can solve the SSL bumping for me meanwhile squid gets stable.
Text only | Text with Images