Add SSL to Juice-Shop (first target proof-of-concept)

mgillam commented 3 years ago

IMPORTANT NOTE: This is a breaking change with Samurai compatibility. It requires Samurai to be setup with mkcert, which have in an open PR - https://github.com/SamuraiWTF/samuraiwtf/pull/158
Added 443 to Juice-Shop's nginx config
Added automatic generation of juice-shop certs with mkcert
Note that the browsers' cert trust can't be automatically set with mkcert until after they're first run. After they're run, mkcert -install run as the primary user will fix the trust, but the browser will need to be restarted.

mgillam commented 3 years ago

Choose squash and merge when merging, to consolidate the screwing around involved to get this to work.

mgillam commented 3 years ago

Samurai PR has merged, merging this.

SamuraiWTF / katana