Skip to content

Commit 3c6414f

Browse files
committed
Update ca certificates locations and instructions
1 parent 353a8e7 commit 3c6414f

File tree

1 file changed

+14
-1
lines changed

1 file changed

+14
-1
lines changed

MITM.md

Lines changed: 14 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,20 @@ export https_proxy=http://127.0.0.1:8080
2121

2222
### Others
2323

24-
Check: https://docs.mitmproxy.org/stable/concepts-certificates/#installing-the-mitmproxy-ca-certificate-manually
24+
Common linux distributions ca certificates location:
25+
26+
| Distribution | Location | Java Location |
27+
|--------------|----------|---------------d|
28+
| Alpine | /etc/ssl/certs/ca-certificates.crt | /etc/ssl/certs/java/cacerts |
29+
| RedHat-based | /etc/pki/tls/certs/ca-bundle.crt | /etc/pki/java/cacerts |
30+
| Debian-based | /etc/ssl/certs/ca-certificates.crt | /etc/ssl/certs/java/cacerts |
31+
32+
You can retrieve these files using OpenAF's oJob _ojob.io/docker/expand_ to extract, append the _mitm_ certificate and then overwrite it on the image (using ojob.io/docker/collapse_ or a K8s config map or similar method).
33+
34+
> You can append _/home/mitm/.mitmproxy/mitmproxy-ca-cert.pem_ to these ca certificates crt files.
35+
> For Java you need to use _key-tool_ or OpenAF's oJob _ojob.io/java/certs_. Depending on the image the cacerts file might be located in _[java home]/lib/security/cacerts_.
36+
37+
Check also: https://docs.mitmproxy.org/stable/concepts-certificates/#installing-the-mitmproxy-ca-certificate-manually
2538

2639
## Usage
2740

0 commit comments

Comments
 (0)