Skip to content

macos.md

Latest commit

 

History

History
92 lines (63 loc) · 5 KB

macos.md

File metadata and controls

92 lines (63 loc) · 5 KB
Raw
description Install and trust the Proxyman CA certificate on macOS, verify HTTPS capture, or use manual Keychain setup when automatic installation fails.

macOS

To inspect HTTPS traffic on your Mac, install and trust the Proxyman CA certificate, then enable SSL Proxying for the domain you want to inspect. Start with automatic installation below, or use Manual Mode if you need to manage trust in Keychain Access yourself.

Install & Trust Proxyman Certificates on your Mac

In order to intercept encrypted HTTPS messages (Request or Response), you have to install Proxyman CA Certificate on your current machine. This step is mandatory for iOS, Android devices, iOS simulators, Java VMs, and Firefox too.

{% hint style="info" %} The Proxyman Certificate is a self-signed certificate that is generated on your machine. Proxyman never stores or transmits any personal data to Proxyman's server or 3rd-party.

Please check out the Privacy Statement to understand what Proxyman obtains or not.

If you'd like to manually generate a Certificate on your machine, then add it to Proxyman. Please check out the Custom Certificate Doc {% endhint %}

{% hint style="info" %} Proxyman's certificate is stored locally at ~/Library/Application\ Support/com.proxyman.NSProxy/app-data/ {% endhint %}

1. Automatic mode (recommended)

Proxyman could automatically install & trust the Certificate in Keychain by following the below steps:

  1. Open the Certificate menu
  2. Install a Certificate on this Mac...
  3. On the Automatic Mode -> Enter your Mac's password (Root Privileges)
  4. Verify the status: ✅ Installed & Trusted in the button (If not, try to use the Manual Tab, or contact us for further support)
  5. Done ✅

To verify capture, make a new HTTPS request from your browser with Proxyman running and SSL Proxying enabled for that domain. Confirm that you can read the request and response. If nothing appears, use the missing-traffic checklist; if certificate installation fails, continue with Manual Mode below.

Install & trust Proxyman Certificacte

{% hint style="info" %} Automation mode requires Root Privileges to perform the installation script. If you're not sure, please consider using Manual mode. {% endhint %}

How does it work?

In automatic mode, Proxyman will automatically perform two steps:

  1. Generate a local Proxyman Certificate at ~/Library/Application\ Support/com.proxyman.NSProxy/app-data/proxyman-ca.pem
  2. Install & Trust the certificate to System Keychain Access. It requires Root Privileges to execute the following CLI:

{% code overflow="wrap" %}

sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ~/Library/Application\ Support/com.proxyman.NSProxy/app-data/proxyman-ca.pem

{% endcode %}

2. Manual Mode (Advance)

Proxyman also offers more freedom for super-users who need to install the certificate on their behalf.

  1. Open the Certificate menu
  2. Install a Certificate on this Mac... -> Select the Manual Tab
  3. Click on the Generate & Add button (Proxyman will locally generate the certificate and add it to Keychain, but not Trust it automatically, no Password required)
  4. In some cases, System Keychains will ask to select what keychain should be installed -> Select System Keychain
  5. Open the Keychain Access app on your Mac -> Search "Proxyman CA" -> Open -> Select "Always Trust" -> Quit Keychain and Save

{% hint style="info" %} If you've done it correctly, Proxyman will display " ✅ Installed and Trusted" status. {% endhint %}

Manually install Proxyman Certifiacte

{% hint style="info" %} If you'd like to use your own custom Root Certificate, please check out the Custom Certificate Doc {% endhint %}

Suppose you are not sure how to trust the certificate on the Keychain Access app. You can open the Terminal app and execute the command:

{% code overflow="wrap" %}

sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ~/Library/Application\ Support/com.proxyman.NSProxy/app-data/proxyman-ca.pem

{% endcode %}

{% hint style="info" %} Make sure that you Delete the Proxyman Certificate in Keychain app if you're not using Proxyman anymore. If not, anyone who has the Proxyman Certificate can intercept your HTTP/HTTPS requests from your macOS machine. {% endhint %}

3. Uninstall Proxyman Certificate

  1. Open Certificate Menu
  2. Reset all Certificates
  3. Enter your Mac password and done