(SOLVED)Trust: Authorities where is the .cert file?

[pheriko]

Hello.

  For squid MITM we need CA Auth, I create one and see 2 files to downoad [crt,key].pem, which one I need to download and install on my browsers?

  Last thing, a lot of manuals show the option to download .crt key, but in my case I don't see that option, is gone or is a bug?

  Running OPNsense 24.7.4_1-amd64
 
 

[Patrick M. Hausen]

The certificate is what client devices must trust.

[pheriko]

 I had seen how, thanks master.

[vivekmauli14]

Hi,

I tried installing mitmproxy on opnsense but couldn't as I didn't found any pkg in the repositories. Then I created a new Debian server with mitmproxy and added a NAT rule from Firewall> NAT> Port Forward. My certificate is created on the debian server using mitmproxy > certs. Still clients not able to trust the installed certificate even when I have put the certificate in the Trusted root C A in certmgr.msc.

Any idea on what might be going wrong here? or How can I do MITM in opnsense as I think maybe squid will require its v7 which will be released in June '25. I was hoping MITM can solve the SSL bumping for me meanwhile squid gets stable.