how to make the mitmproxy root CA certificate work with Chrome / Chromium on Linux / Ubuntu

I’m on Ubuntu 14.04

Took me a while to figure this out (I was not able to find any information on this when searching with the “mitmproxy” keyword). It’s working out-of-the box with Firefox but not at all with Chrome.

The certificate downloaded from mitm.it needs to be added using certutil (https://code.google.com/p/chromium/wiki/LinuxCertManagement)

certutil -d sql:$HOME/.pki/nssdb -A -t "C,," -n <certificate nickname> -i <certificate filename>

I don’t know where the best place to document this is. Starting now people searching for it will at least find this entry.

[slhck]

For completeness’ sake, this is what I had to do:

sudo apt-get install libnss3-tools
certutil -d sql:$HOME/.pki/nssdb -A -t C -n mitmproxy -i ~/.mitmproxy/mitmproxy-ca-cert.pem

Then, restart Chrom[e|ium] with the command line argument --proxy-server=http://127.0.0.1:8080

Is there a difference between that and this approach you mentioned?

[ihamburglar]

So since #549 has been merged, I consider this closed. For future google people who may arrive, chrome://settings/search#ssl is how you import certs in a gui in Chome(even on Linux). For our use case it is less convenient than having an “install certificate” button on the certificate information window, but I understand chrome’s desire to dissuade people from installing random certs. I’m going to see if I can get that Chrome documentation updated to mentoin the GUI.