Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

configure HTTPS recording from the command line #14

Open
Aarskin opened this issue Mar 27, 2017 · 4 comments
Open

configure HTTPS recording from the command line #14

Aarskin opened this issue Mar 27, 2017 · 4 comments

Comments

@Aarskin
Copy link

Aarskin commented Mar 27, 2017

Hi,

I'm hoping there is a way to configure my proxy with a trusted certificate from the command line. I don't see this anywhere in the current set of samples - only Java examples.

Is there a way to configure a certificate for my Flashback proxy without Java?

Thanks

@Aarskin Aarskin changed the title configure HTTP recording from the command line configure HTTPS recording from the command line Mar 27, 2017
@Aarskin
Copy link
Author

Aarskin commented Mar 27, 2017

I was able to get 200 OK with

{ "sceneMode": "record", "sceneName": "test1", "matchRule": "matchEntireRequest", "scenePath": "tmp", "proxyHost": "localhost", "proxyPort": "5555", "caCertPath": "C:\\certs\\trust_proxies.pfx", "caCertPwd": "your password here", "caAlias": "ITrustProxies", "caKeyPwd": "your password here", "caCertCN": "", "caCertOU": "", "caCertO": "", "caCertL": "", "caCertCC": "" }

But I am still unable to hit pages with HTTPS using Flashback as a MITM. Is there any way I can verify that this is a trust issue with my Certificate and not with Flashback itself?

I used IIS to generate a self-signed certificate. I do not get a security alert in IE or Chrome, but I do see the broken lock (in Chrome, closed lock in IE). Can anyone confirm/deny that this is the root of problem?

@sf1152
Copy link
Contributor

sf1152 commented Mar 28, 2017

Yes, the way we support non-java is that we have admin restful api that can setup proxy for you. You just need make sure if your caCert can be trusted by your certificate store.

BTW: did you get any response from proxy?

@Aarskin
Copy link
Author

Aarskin commented Mar 28, 2017

Not quite yet, I'm focusing on getting more comfortable with other aspects of Flashback at the moment.

@ben-oldcom
Copy link
Contributor

@Aarskin hi, how did you try to access a https resource using flashback, curl? not sure about windows, but here is more details of how generate and using a self signed certificate for flashback here: #8

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants