titanium-web-proxy icon indicating copy to clipboard operation
titanium-web-proxy copied to clipboard

How can we not generate rootcert.pfx without forwarding traffic and intercepting data

Open bbhxwl opened this issue 5 years ago • 7 comments

How can we not generate rootcert.pfx without forwarding traffic and intercepting data

bbhxwl avatar Jan 06 '20 12:01 bbhxwl

So you ask how NOT to do something? Just simply do not do that:) Disable the decryption.

honfika avatar Jan 06 '20 13:01 honfika

It's closed.The file is still generated.

explicitEndPoint = new ExplicitProxyEndPoint(IPAddress.Any, TcpPort,false);

bbhxwl avatar Jan 06 '20 14:01 bbhxwl

When you create the proxyServer, set the fiert parameter to false: new ProxyServer(false)

and set seothing to the root certiicate: proxyServer.CertificateManager.RootCertificate = new X509Certificate2();

honfika avatar Jan 06 '20 15:01 honfika

This will not create a root certificate file?

bbhxwl avatar Jan 06 '20 15:01 bbhxwl

I don't know, please try it.

honfika avatar Jan 07 '20 07:01 honfika

If the onrequest event wants to tamper with the post request, it also uses e.setrequestbodystring (STR); is the method? Just tested doesn't work. Maybe it's something else?

bbhxwl avatar Jan 09 '20 17:01 bbhxwl

did you get the request body before you set it?

honfika avatar Jan 09 '20 17:01 honfika