0

I'm developing an HTTPS proxy server using titanium proxy server. I will monitor some websites and will modify the response of those websites. Some of those websites are https, that's why I'm using https proxy server.

Now here is the problem. As far as I know, to intercept an HTTPS site, we must have certificate and titanium proxy server has a dummy certificate. I think whenever the server is started, titanium proxy server tries to install that certificate as a root certificate so that browsers can trust that certificate. This approach is working perfect for all browsers except firefox.

I can see titanium root certificate installed in all browsers and I can successfully intercept HTTPS websites running in Google Chrome or Safari. But whenever I try to open a HTTPS website in firefox, it gives an error that the connection is untrusted.

I think certificate is not being installed in firefox or is being rejected by firefox as it is not signed by any CA authority. But why are other browsers not showing the same error? My problem is that I need to intercept HTTPS websites too - it is requirement of the project. What if I buy a certificate from a CA authority and use that certificate with application, will it work or not? Can I use web server certificates with a desktop application? I really don't know much about SSL. any help will be much appreciated. Looking forward to you guys.

PS: I'm attaching a snapshot of firefox windows, for reference. error window

S.Spieker
  • 7,005
  • 8
  • 44
  • 50
Zohaib Aslam
  • 50
  • 8

1 Answers1

1

Firefox uses it's own CA store, while Chrome, Safari and IE use the systems CA store on Windows and Mac. Thus you explicitly need to import the certificate into Firefox as trusted.

Steffen Ullrich
  • 114,247
  • 10
  • 131
  • 172
  • can I do that programmatically? is there any way because I don't want user to do such advance stuff – Zohaib Aslam Oct 28 '15 at 19:43
  • @ZohaibAslam: A short search on google gives http://stackoverflow.com/questions/1435000/programmatically-install-certificate-into-mozilla, https://wiki.mozilla.org/CA:AddRootToFirefox, https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil – Steffen Ullrich Oct 28 '15 at 19:47