Lots of cert errors when running Firefox with httptap

[klausman]

---> GET https://detectportal.firefox.com/canonical.html
<--- 200 https://detectportal.firefox.com/canonical.html (90 bytes)
---> GET https://detectportal.firefox.com/success.txt?ipv4
<--- 200 https://detectportal.firefox.com/success.txt?ipv4 (8 bytes)
error reading http request over tls server conn: remote error: tls: unknown certificate authority, aborting
---> GET https://detectportal.firefox.com/canonical.html
<--- 200 https://detectportal.firefox.com/canonical.html (90 bytes)
---> GET https://detectportal.firefox.com/success.txt?ipv4
<--- 200 https://detectportal.firefox.com/success.txt?ipv4 (8 bytes)
error reading http request over tls server conn: remote error: tls: unknown certificate authority, aborting
---> GET https://detectportal.firefox.com/canonical.html
<--- 200 https://detectportal.firefox.com/canonical.html (90 bytes)
---> GET https://detectportal.firefox.com/success.txt?ipv4
<--- 200 https://detectportal.firefox.com/success.txt?ipv4 (8 bytes)
error reading http request over tls server conn: remote error: tls: unknown certificate authority, aborting
error reading http request over tls server conn: remote error: tls: unknown certificate authority, aborting
---> GET https://detectportal.firefox.com/canonical.html
<--- 200 https://detectportal.firefox.com/canonical.html (90 bytes)
---> GET https://detectportal.firefox.com/success.txt?ipv4
<--- 200 https://detectportal.firefox.com/success.txt?ipv4 (8 bytes)

In Firefox itself, I get a lot of "oh no, MITM!" type errors, so my suspicion is that the CA injection doesn't quite work right there. Whether that is within scope for httptap, I of course don't know.

[klausman]

With wget, I get similar errors:

$ go/bin/httptap -- wget https://google.com
--2025-02-04 14:43:10--  https://google.com/
Resolving google.com (google.com)... 142.250.203.110, 2a00:1450:400a:808::200e
Connecting to google.com (google.com)|142.250.203.110|:443... connected.
ERROR: The certificate of ‘google.com’ is not trusted.
ERROR: The certificate of ‘google.com’ doesn't have a known issuer.
error reading http request over tls server conn: EOF, aborting
subprocess exited with code 5

So maybe there's something wrong with my setup?

[SuperSandro2000]

For wget see #15