aniketpanjwani / chomper

Internet blocker for the Linux desktop.
https://addictedto.tech/chomper/
GNU General Public License v3.0
356 stars 43 forks source link

Chomper gets in between SSL connections #41

Open Mela opened 6 years ago

Mela commented 6 years ago

Note: for support questions, please use Gitter. This repository's issues are reserved for feature requests and bug reports.

I installed chomper first with a installation guide I found via Google that was from February and was most likely out of date. After running in the first problems I found that there is now a installation script, so I worked with it. This might have lead to some mix-ups. Chomper installed, executed fine, but it got in the way with SSL sites - which means nearly every site these days. Means: I can't access them at all.

I then realized my system lacked mitmproxy and I installed it. (The dependency should be mentioned on the install page). I deleted ~/.pyenv ~/.virtualenvs and ~/chomper and started the installation process again. This time it looked fine mitmproxy-wise at first glance. Yet now the shell reports the error: pyenv: no such command `sh-activate'.

I still can't access SSL sites when chomper is running, despite mitmproxy is now installed.

Let me access SSL sites that are not blocked or whitelisted.

v-marinkov commented 5 years ago

Hi, have you found a way around this? It really is a deal breaker for an otherwise excellent program.

v-marinkov commented 5 years ago

I managed to solve it on Ubuntu 18.10. I used the automated Debian script for installation and it must have failed to import the mitmproxy certificates to the browsers. What I did was to just manually implement the steps related to the certificates from the script:

# Install certificates
screen -d -m pipenv run mitmdump
sleep 2
pkill -f mitmdump # Generate certificates
openssl x509 -outform der -in /home/$USER/.mitmproxy/mitmproxy-ca.pem -out /home/$USER/.mitmproxy/mitmproxy-ca.crt
sudo cp /home/$USER/.mitmproxy/mitmproxy-ca.crt /usr/local/share/ca-certificates/mitmproxy-ca.crt # Install root certificates
sudo update-ca-certificates
sudo sh ./chomper/certs.sh # Make browsers recognize root certificates