iOS 13.3: Certificate installation instructions need improvement

Problem Description

After installing profile and activating it, Safari still shows websites as “not trusted” and apps show “network error”

Steps to reproduce the behavior:

1. Configure wifi to use mitmproxy
2. Install and activate profile from mitm.it
3. Navigate anywhere in Safari

refs https://github.com/mitmproxy/mitmproxy/issues/3649 (added EKU) and #3647

System Information

Paste the output of “mitmproxy --version” here.

Mitmproxy: 5.0.0
Python:    3.7.5
OpenSSL:   OpenSSL 1.1.1d  10 Sep 2019
Platform:  Darwin-19.2.0-x86_64-i386-64bit

[andig]

I’ve found that I need to add one more step. After following 1-4, I needed to trust the certificate as root certificate. This is apparently not achieved by installing the profile alone:

Goto Settings -> General -> Info -> Certificate Trust -> Mitmproxy and enabled “Trusted Root” (German screenshot below):

Is this the expected behaviour? Add to docs? Otherwise good to close!

[ohld]

I finally found out how to run all of this.

My settings

mitmproxy --version
  Mitmproxy: 5.0.0
  Python:    3.7.5
  OpenSSL:   OpenSSL 1.1.1d  10 Sep 2019
  Platform:  Darwin-18.7.0-x86_64-i386-64bit

iPhone XS (current latest OS).

Step-by-step

Macbook

1. brew install mitmproxy
2. run mitmweb for web interface
3. in new Terminal window run ifconfig to find out your laptop local IP address (probably starts with 192.168. ... )

iPhone

1. Open settings -> Wi-Fi -> “your Wi-Fi network” -> Configure Proxy
2. Insert into “Server” your local laptop’s IP and default port “8080”
3. In Safari open website ‘mitm.it’ and install sertificate
4. Open Settings -> General -> Profiles -> mitmproxy -> Verify the sertificate

And now everything will be Trusted and Awesome!