Is it possible to check if mitm-certificate is installed in addon? - mitmproxy

I was wondering if it is possible to check if the MITM certificate is installed and if not then redirect the client to the mitm.it page.
I can't find anything in the documentation about this.

Related

Can't create GitHub account

I want to create a GitHub account, but something is blocking me from doing that
As you see, it's asking me to do captcha test over and over again.
Should I report this as a bug? is this also happening to you?
I suggest to wait some minutes and try it later. Or you can just try to do the following steps:
Ensure JavaScript is enabled on your browser.
Ensure your browser is supported. If your browser isn't supported, upgrade your browser or install a supported browser. For a list of supported browsers, see "Supported browsers".
Ensure your network configuration is not blocking https://octocaptcha.com/ or https://arkoselabs.com/. If you're behind a corporate firewall, contact your IT administrator to allow those domains. To verify access to these domains, visit https://octocaptcha.com/test and ensure the text "Connection successfully made!" is displayed, then visit https://client-demo.arkoselabs.com/github and ensure you are able to load the captcha.
Ensure your browser does not have plug-ins or extensions that may be interfering with GitHub. If so, temporarily disable the plug-ins or extensions during captcha verification.
Otherwise everything works according to the status page.
In Debian: apt install epiphany-browser
It just bypassed github's signup "barriers" in a way that fresh installations of Firefox ESR / Firefox latest / Chromium... in Debian, Windows, Android... could not!
I tried many times, but I couldn't create an account on Github. After that, I tried to create an account on GitHub using my mobile google chrome, then I successfully created an account in Github. Thanks.

Facebook connector: login issues

I am using a development environment http://localhost:3000 how can i install the SSL certificate in local?it doesn't make sense. How come Facebook force me to use https, does exist a sandbox or other way around?
thanks in advance

Does SoapUI support PKI/certificate authentication?

Does SoapUI support PKI authentication? I currently have version SoapUI 5.0.0 available to me.
If so then...
What versions support it?
Are any of the versions free?
How do I configure the tool to use PKI?
If anyone can, please assist with details or a link to another forum posting that I cannot find.
All authentication done to the server is done via certificate. I can use HttpRequester plugin with Firefox but find it to be lacking and want to use SoapUI. In order to do so I need to have SoapUI present my cert to the server but cannot find information on how this is done.
Additionally, to be more precise I have .p12 and a .ppk file to work with. What do I need to do to get this to function? I posted this to the SmartBear forum site almost a week ago but have not gotten any response.
The answer to this is (when using SoapUI 5.0.0)
File > Preferences
Click SSL Settings tab
KeyStore: C:\pathToYour\fileName.p12
KeyStore Password: password to your p12 file
Click OK

PhoneGap module to detect certificate error (certificate pinning)

How can I detect certificate errors when attempting to access web content hosted on a HTTPS site with a certificate that would generate browser certificate errors or warnings?
It seems that currently the framework does not even send the HTTP request if the communication channel is not secure (i.e. if SSL is not enforced properly [e.g the validation of the certificate’s chain of trust fails])?
Similarly, what would be the best way to enforce certificate pinning?
Cheers
You can write your own PhoneGap Plugin based on the following SO question:
How to pin the Public key of a certificate on iOS
Here's some background on Pinning from the OWASP:
Pinning Cheat Sheet
If you end up writing the plugin, let me know as I'm interested too.
check out this post, which includes a PhoneGap (Build) plugin for certificate pinning, by comparing the server certificate fingerprint with an expected value: http://www.x-services.nl/certificate-pinning-plugin-for-phonegap-to-prevent-man-in-the-middle-attacks/734

facebook update: How to provide an SSL certificate

You must provide an SSL certificate in the Dev App settings to avoid having your app disabled.
https://developers.facebook.com/roadmap/
Do I have to upload my certificates anywhere? Where?
You need to add your certificate to your web server.
For more information about installing certificates, visit this link: https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=content&id=SO16226
Find out what kind of web server you're using and follow the instructions. You may need to contact your web hosting administrator for help.
Once the certificate is installed on your web server, you need to enter the https url in the dev app settings, I believe it's called "Secure Canvas URL". That's all that facebook requires of you.