ProxymanApp / ProxymanApp/Proxyman
SSL certificate configuration via CLI
@NghiaTranUIT is already working on this.
Since Feb 10, 2025.
- Dominant language
- No language data
- Stars
- 7k
- Forks
- 237
- PR merge metrics
- No merged PRs in 30d
Description
Description
- Support for exporting the CA cert used by Proxyman with a
proxyman-cli. - Support for adding a new cert to Proxyman's trust store with
proxyman-cli.
Why this feature/change is important?
On 1, I often run Docker containers that I set the proxy environment variables to point to Proxyman. But I need a quick "automate-able" way to give the CA to the container for it to trust. So if there's a proxyman-cli export-ca that prints out the contents of the CA cert used by Proxyman as a .pem, that'd be perfect.
On 2, my application uses Kubernetes API on AWS EKS clusters. Authenticating there means that EKS responds with a custom CA cert that I need to trust to make further calls to the Kubernetes API endpoint. If I am to use Proxyman for this, I need to have Proxyman trust that CA, dynamically at runtime, so that Proxyman can talk to the Kubernetes API endpoint.
I'm achieving both of these with mitmproxy today, but I'd like to use Proxyman instead. The first is solved because mitmproxy's CA cert is just a file in ~/.mitmproxy so I can do as I wish. The second is solved by appending the cert dynamically to mitmproxy's certifi trust store dynamically, and refreshing mitmproxy's SSL context cache (via a custom add-on).
But with Proxyman, I don't think this is doable today. I'd really like to see these so I can move to Proxyman since this has better breakpoint and scripting functionality.
Thanks!
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.