Re: [squid-users] Re: SSL bump not working for Android and IOS apps

Try to surf into the web site using firefox on a regular pc or chrome
and see what happens then.

Eliezer

On 04/07/2014 08:43 PM, Rajesh Srivastava wrote:
> - That you have installed the root CA certificate on the device. - Yes,
> certificate is installed on device
> - The certificate is "bumpable". - Yes, I can see access logs for https
> sites from browser
> - The app is not using embedded certificate(public or per user). - I am not
> sure though this might be the reason. Is there a way to know if an app for
> e.g. twitter, soundhound etc. use embedded certificate.
>
> Thanks,
> Rajesh
>
>
> Eliezer Croitoru-2 wrote
>> The answer to what you seek depends mainly on:
>> - That you have installed the root CA certificate on the device.
>> - The certificate is "bumpable".
>> - The app is not using embedded certificate(public or per user).
>>
>> Eliezer
>>
>> On 04/06/2014 07:56 PM, Rajesh Srivastava wrote:
>>> Hi,
>>>
>>> As part of a proof of concept, I am able to use ssl bump for https sites
>>> from IE and Firefox browsers. I have created a self signed certificate in
>>> squid and have added the same as trusted certificate in IE and Firefox
>>> browsers.
>>>
>>> I added the same certificate in a mobile device and could see ssl bump is
>>> working from inbuilt mobile browser, chrome\safari browsers. But when I
>>> use
>>> mobile apps, then for couple of apps like twitter, soundhound etc, ssl
>>> bump
>>> is not working and I can see SSL error in squid cache log.
>>>
>>> Is there a way to address ssl bump for mobile apps?
>>>
>>> Thanks in advance,
>>> Rajesh
>>>
>>>
>>>
>>> --
>>> View this message in context:
>>> http://squid-web-proxy-cache.1019090.n4.nabble.com/SSL-bump-not-working-for-Android-and-IOS-apps-tp4665453.html
>>> Sent from the Squid - Users mailing list archive at Nabble.com.
>>>
>
>
>
>
>
> --
> View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/SSL-bump-not-working-for-Android-and-IOS-apps-tp4665453p4665470.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
>
Received on Mon Apr 07 2014 - 19:44:29 MDT