How to make an arbitrary application trust my SSL certificate?











up vote
1
down vote

favorite












I have installed charles (or any other mitm proxy), installed its certificate as root CA, run proxy 127.0.0.1:8889.



However, simple requests.get ('https://stackoverflow.com/') in python does not work, it gives an error certificate verify failed. The charles documentation suggests source code forcing to trust the certificate. session.verify = "charles-ssl-proxying-certificate.pem". Likewise with browsers, instructions are on https: https://www.charlesproxy.com/documentation/using-charles/ssl-certificates/



But what if I want to see https traffic of arbitrary .exe? I don’t have access to its sources, and it doesn’t provide any means for importing certificates (like browsers).










share|improve this question






















  • Have you tried to install the fake certificate as root certificate on the underlying operating system ?
    – programmersn
    Nov 11 at 19:56












  • Yes, i did. But application still not trust. I used charles with proxifier
    – exodus
    Nov 11 at 22:33

















up vote
1
down vote

favorite












I have installed charles (or any other mitm proxy), installed its certificate as root CA, run proxy 127.0.0.1:8889.



However, simple requests.get ('https://stackoverflow.com/') in python does not work, it gives an error certificate verify failed. The charles documentation suggests source code forcing to trust the certificate. session.verify = "charles-ssl-proxying-certificate.pem". Likewise with browsers, instructions are on https: https://www.charlesproxy.com/documentation/using-charles/ssl-certificates/



But what if I want to see https traffic of arbitrary .exe? I don’t have access to its sources, and it doesn’t provide any means for importing certificates (like browsers).










share|improve this question






















  • Have you tried to install the fake certificate as root certificate on the underlying operating system ?
    – programmersn
    Nov 11 at 19:56












  • Yes, i did. But application still not trust. I used charles with proxifier
    – exodus
    Nov 11 at 22:33















up vote
1
down vote

favorite









up vote
1
down vote

favorite











I have installed charles (or any other mitm proxy), installed its certificate as root CA, run proxy 127.0.0.1:8889.



However, simple requests.get ('https://stackoverflow.com/') in python does not work, it gives an error certificate verify failed. The charles documentation suggests source code forcing to trust the certificate. session.verify = "charles-ssl-proxying-certificate.pem". Likewise with browsers, instructions are on https: https://www.charlesproxy.com/documentation/using-charles/ssl-certificates/



But what if I want to see https traffic of arbitrary .exe? I don’t have access to its sources, and it doesn’t provide any means for importing certificates (like browsers).










share|improve this question













I have installed charles (or any other mitm proxy), installed its certificate as root CA, run proxy 127.0.0.1:8889.



However, simple requests.get ('https://stackoverflow.com/') in python does not work, it gives an error certificate verify failed. The charles documentation suggests source code forcing to trust the certificate. session.verify = "charles-ssl-proxying-certificate.pem". Likewise with browsers, instructions are on https: https://www.charlesproxy.com/documentation/using-charles/ssl-certificates/



But what if I want to see https traffic of arbitrary .exe? I don’t have access to its sources, and it doesn’t provide any means for importing certificates (like browsers).







https ssl-certificate capture mitmproxy






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Nov 11 at 14:41









exodus

211




211












  • Have you tried to install the fake certificate as root certificate on the underlying operating system ?
    – programmersn
    Nov 11 at 19:56












  • Yes, i did. But application still not trust. I used charles with proxifier
    – exodus
    Nov 11 at 22:33




















  • Have you tried to install the fake certificate as root certificate on the underlying operating system ?
    – programmersn
    Nov 11 at 19:56












  • Yes, i did. But application still not trust. I used charles with proxifier
    – exodus
    Nov 11 at 22:33


















Have you tried to install the fake certificate as root certificate on the underlying operating system ?
– programmersn
Nov 11 at 19:56






Have you tried to install the fake certificate as root certificate on the underlying operating system ?
– programmersn
Nov 11 at 19:56














Yes, i did. But application still not trust. I used charles with proxifier
– exodus
Nov 11 at 22:33






Yes, i did. But application still not trust. I used charles with proxifier
– exodus
Nov 11 at 22:33



















active

oldest

votes











Your Answer






StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53249791%2fhow-to-make-an-arbitrary-application-trust-my-ssl-certificate%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown






























active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes
















draft saved

draft discarded




















































Thanks for contributing an answer to Stack Overflow!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.





Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


Please pay close attention to the following guidance:


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53249791%2fhow-to-make-an-arbitrary-application-trust-my-ssl-certificate%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Florida Star v. B. J. F.

Error while running script in elastic search , gateway timeout

Adding quotations to stringified JSON object values