node-http-mitm-proxy icon indicating copy to clipboard operation
node-http-mitm-proxy copied to clipboard

Why using multiple certificates

Open ggirotto opened this issue 4 years ago • 4 comments

I'm trying to understand the decision of having multiple certificates, one for each visited website. This means that we have to manually trust each one of the generated certificates once a new website is visited? Why not creating a global certificate that communicates with the proxy and the proxy handle this certificate exchange with the websites? Like Hoxy does. I'm currently working on a filter proxy application and was planning to use this library, but once I visit any website using HTTPS the website refuse the connection because I haven't trust that website certificate.

And even if it's possible to automatically trust all these certificates, this will stack tons of certificates on the user machine and keychain.

Is this the expected behaviour or am I missing something?

ggirotto avatar May 10 '20 16:05 ggirotto

Solution: root certificate can be trusted

root certificate = first certificate

The certificates of other websites are generated according to the root node certificate

LIngMax avatar Sep 01 '20 08:09 LIngMax

Is there a possibility of not generating a certificate for each other website and use only the first certificate (only the root certificate)

Minyar2004 avatar Nov 13 '20 13:11 Minyar2004

@Devhercule Any success?

sagarsoni7 avatar Nov 16 '21 18:11 sagarsoni7

did u find the solution :-) tried of getting bunch of certificates + keys

RikaShiro avatar Oct 19 '22 09:10 RikaShiro