🔒Mitmproxy Adds --emudhra Option for Compromised Certificates
Mitmproxy now supports compromised eMudhra certificates
TL;DR
Mitmproxy now includes the --emudhra option to sign TLS certificates with a compromised eMudhra intermediate CA key, addressing security concerns. This update removes eMudhra CAs from precompiled binaries and fixes a KeyError in WBXML contentview.
Mitmproxy has added the `--emudhra` option to sign TLS certificates with a compromised eMudhra intermediate CA key, addressing security concerns. This change removes eMudhra CAs from precompiled binaries and fixes a `KeyError` in the WBXML contentview when tags are missing from the code page. Developers using Mitmproxy for TLS certificate management and security testing will benefit from these updates, ensuring more robust handling of compromised certificates. The `load` method in `tlsconfig.py` and several methods in `mitmproxy/certs.py` were updated to include the `emudhra` option, enhancing security and reliability.
Key Points
Mitmproxy added `--emudhra` option to sign TLS certificates with a compromised eMudhra CA key, addressing security issues.
Certifi dependency updated to remove eMudhra CAs from precompiled binaries, enhancing security.
KeyError fixed in WBXML contentview when tags are missing from the code page, improving reliability.
Load method in tlsconfig.py updated to include `emudhra` option, enhancing security features.
CertStore class updated to include `default_privatekey`, `default_ca`, `default_chain_file`, and `default_chain_certs` attributes, improving certificate management.
Why It Matters
Developers using Mitmproxy for TLS certificate management and security testing now have better tools to handle compromised certificates. The `--emudhra` option and related updates ensure more robust handling of security issues, improving reliability and security for applications that rely on TLS certificates.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,569 builders reading daily.