Barre / privaxy

Privaxy is the next generation tracker and advertisement blocker. It blocks ads and trackers by MITMing HTTP(s) traffic.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Unable to connect with anything. Possibly due to the certificate

Lippiece opened this issue · comments

commented

As per README in /usr/share/ca-certificates:

   7   │ QUICK HELP: To add a certificate in the simple PEM or DER file formats to the
   8   │             list of CAs trusted on the system:
   9   │ 
  10   │             Copy it to the
  11   │                     /usr/share/ca-certificates/trust-source/anchors/
  12   │             subdirectory, and run the
  13   │                     update-ca-trust
  14   │             command.

I've done that, and also tried /etc/ca-certificates, but I'm unable to connect to anything.

When not importing the certificate into Firefox, it says MOZILLA_PKIX_ERROR_MITM_DETECTED:

image

When importing, it says BAD_SIGNATURE:

image

commented

Hi,

https://support.mozilla.org/en-US/kb/error-codes-secure-websites

The suggestions provided for when the problem occurs in multiple sites are:

  • Antivirus: reinstall or use steps for specific product -- not the case. or at least tell why privaxy could cause certificate issues.
  • Monitoring/filtering in corporate networks: address your IT department -- thats_why_im_here.jpg.
  • Malware: deal with the malware -- I assume privaxy is not a malware.

Please reopen the issue. I'd be happy to provide any info to resolve this.

You need to make sure the Privaxy certificate is trusted, can you show a screenshot of your firefox configuration?

commented

You need to make sure the Privaxy certificate is trusted, can you show a screenshot of your firefox configuration?

Do you mean settings? Should I screenshot all the pages?

@Lippiece Follow these steps and let me know if they work. I know the thread is closed but I had to tinker around to find a solution.

  1. sudo trust anchor --store ./where_you_have_the_certificate/privaxy_ca_cert.pem
  2. sudo update-ca-trust
  3. Make sure privaxy is running and you have the filters applied.
  4. Go to settings and search for certificates and look for this - image
  5. If you see it, then lastly check if you have set up your OS redirecting your connection through local proxy at localhost:8100