search

FeraeLabs / skunk

A person-in-the-middle proxy
MIT License
0 stars 0 forks source link

TLS issue with Firefox #6

Closed jgraef closed 5 months ago

jgraef commented 5 months ago

This works:

cargo run -- proxy example.com:443
curl -v --cacert ~/.config/gocksec/skunk/ca.cert.pem --socks5-hostname localhost:9090 https://example.com

but Firefox firefox complains: SEC_ERROR_BAD_SIGNATURE

skunk-cli logs this:

2024-05-13T21:01:40.929657Z  WARN socks{address=127.0.0.1:48384}: tracing_unwrap: called `Result::ok_or_log` on an `Err` value: Tls(Io(Custom { kind: InvalidData, error: AlertReceived(BadCertificate) }))
jgraef commented 5 months ago

I probably had an old CA cert in the Firefox root cert store. Reimporting fixed it :unamused: