The certificate has expired. How can I obtain a new one?

[workcheng]

[aaggarwal-sumo]

Same query I also had.

[lucashimpens]

Also have the same problem.

[msd955]

I have the same problem.
I am using the python version of browsermob proxy. Apparently in the python version there is no way to set up new ssl certificates.

[workcheng]

I've found out how to generate certificates.
https://github.com/lightbody/browsermob-proxy/tree/master/mitm

[aaggarwal-sumo]

I've found out how to generate certificates. https://github.com/lightbody/browsermob-proxy/tree/master/mitm

Is it possible to share exact steps not sure if I am doing correct when I followed above link.

[praveenthumbur]

Can you share the steps, how to generate new certificate (ca-certificate-ec.cer) or anyone generated new certificate. Can you share to me?

[workcheng]

try this:
ca-certificate-ec.zip
@praveenthumbur @aaggarwal-sumo

[praveenthumbur]

Hi @workcheng ,
Shared Certificate is not working. When i set the proxy. Getting Server Error.
This certificate worked fine for last 3 years without any issues. Suddenly its not working. getting expired issue.
https://github.com/lightbody/browsermob-proxy/blob/master/browsermob-core/src/main/resources/sslSupport/ca-certificate-ec.cer

[aaggarwal-sumo]

Yes shared certificate not working:

`curl --cacert ca-certificate-ec.cer --verbose --proxy localhost:8081 https://www.google.com/ 
* Host localhost:8081 was resolved.
* IPv6: ::1
* IPv4: 127.0.0.1
*   Trying [::1]:8081...
* Connected to localhost (::1) port 8081
* CONNECT tunnel: HTTP/1.1 negotiated
* allocate connect buffer
* Establish HTTP proxy tunnel to www.google.com:443
> CONNECT www.google.com:443 HTTP/1.1
> Host: www.google.com:443
> User-Agent: curl/8.7.1
> Proxy-Connection: Keep-Alive
> 
< HTTP/1.1 200 Connection established
< Connection: keep-alive
< Via: 1.1 browsermobproxy
< 
* CONNECT phase completed
* CONNECT tunnel established, response 200
* ALPN: curl offers h2,http/1.1
* (304) (OUT), TLS handshake, Client hello (1):
*  CAfile: ca-certificate-ec.cer
*  CApath: none
* (304) (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: unable to get local issuer certificate
* Closing connection
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (OUT), TLS alert, unknown CA (560):
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.`

[workcheng]

Hi @workcheng , Shared Certificate is not working. When i set the proxy. Getting Server Error. This certificate worked fine for last 3 years without any issues. Suddenly its not working. getting expired issue. https://github.com/lightbody/browsermob-proxy/blob/master/browsermob-core/src/main/resources/sslSupport/ca-certificate-ec.cer

The certificate has expired. You should generate paired certificates in this way, update the program, and then install the newly generated certificate.cer into the browser：
https://github.com/lightbody/browsermob-proxy/tree/master/mitm#generating-and-saving-root-certificates

[workcheng]

Yes shared certificate not working:

`curl --cacert ca-certificate-ec.cer --verbose --proxy localhost:8081 https://www.google.com/ 
* Host localhost:8081 was resolved.
* IPv6: ::1
* IPv4: 127.0.0.1
*   Trying [::1]:8081...
* Connected to localhost (::1) port 8081
* CONNECT tunnel: HTTP/1.1 negotiated
* allocate connect buffer
* Establish HTTP proxy tunnel to www.google.com:443
> CONNECT www.google.com:443 HTTP/1.1
> Host: www.google.com:443
> User-Agent: curl/8.7.1
> Proxy-Connection: Keep-Alive
> 
< HTTP/1.1 200 Connection established
< Connection: keep-alive
< Via: 1.1 browsermobproxy
< 
* CONNECT phase completed
* CONNECT tunnel established, response 200
* ALPN: curl offers h2,http/1.1
* (304) (OUT), TLS handshake, Client hello (1):
*  CAfile: ca-certificate-ec.cer
*  CApath: none
* (304) (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: unable to get local issuer certificate
* Closing connection
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (OUT), TLS alert, unknown CA (560):
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.`

The certificate has expired. You should generate paired certificates in this way, update the program, and then install the newly generated certificate.cer into the browser：
https://github.com/lightbody/browsermob-proxy/tree/master/mitm#generating-and-saving-root-certificates

[praveenthumbur]

Hi @workcheng ,
I'm not using this code in my project. I'm using only this certificate in my project using below steps.

1. Download ca-certificate-ec.cer in my iOS mobile.
2. Install certificate in General -> VPN Device management -> Install it
3. Trust certificate
4. Start Browsermob proxy in my code and test my app.
5. All events are captured and saved in har file.

I need this certificate only. Could you please help on the steps how to generate this certificate.
what command is used for generating the this certificate.
Do we need to download this code.
@workcheng Do you have code with you for generating new certificate. Can you share with me.

[workcheng]

Hi @workcheng , I'm not using this code in my project. I'm using only this certificate in my project using below steps.

1. Download ca-certificate-ec.cer in my iOS mobile.
2. Install certificate in General -> VPN Device management -> Install it
3. Trust certificate
4. Start Browsermob proxy in my code and test my app.
5. All events are captured and saved in har file.

I need this certificate only. Could you please help on the steps how to generate this certificate. what command is used for generating the this certificate. Do we need to download this code. @workcheng Do you have code with you for generating new certificate. Can you share with me.

try this:
tmp.zip
Replace the files with the same names under the ssl-support file.

[niha55]

Has anybody found a workaround for this issue?

[workcheng]

Hi @workcheng , I'm not using this code in my project. I'm using only this certificate in my project using below steps.

1. Download ca-certificate-ec.cer in my iOS mobile.
2. Install certificate in General -> VPN Device management -> Install it
3. Trust certificate
4. Start Browsermob proxy in my code and test my app.
5. All events are captured and saved in har file.

I need this certificate only. Could you please help on the steps how to generate this certificate. what command is used for generating the this certificate. Do we need to download this code. @workcheng Do you have code with you for generating new certificate. Can you share with me.

try this: tmp.zip Replace the files with the same names under the ssl-support file.

try this:
ssl-support.zip