Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disabling certificate validation loops when using locally trusted root cert #86

Open
cbrnrd opened this issue Dec 6, 2024 · 0 comments

Comments

@cbrnrd
Copy link

cbrnrd commented Dec 6, 2024

Bug Details

I am trying to intercept some traffic on my iPhone using mitmproxy. I've installed the root cert generated by mitmproxy and have fully trusted it on my device and confirmed that other normal traffic functions normally and is trusted. However, when opening the ProtonMail app, the following prompt shows up: IMG_8489. From glancing at the code this is expected since cert pinning is being used. However, when the "Disable Validation" option is pressed in the popup, it opens the same popup again and never sends a request. This loop continues for a few times (somewhere between 2 and 6 times), then this popup appears:
IMG_8490

This toast appears at the top of the screen each time a popup occurs: IMG_8491

Is this looping expected behavior?
To me this seems to be a bug as the expected behavior would be to disable certificate checking when the "Disable Validation" option is pressed.

Please let me know if I can provide any additional details or do any other tests :)

System information

  • App version: 4.18.0 (10270)
  • iOS version: 18.2 (22C5142a)
  • iPhone model: 13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant