From GitHub · · 1m 40s
Add, emudhra option
New mitmproxy update adds option to sign TLS certificates with compromised eMudhra CA key.
In brief
New mitmproxy update adds option to sign TLS certificates with compromised eMudhra CA key. Mitmproxy now includes a flag to sign TLS certificates using a compromised eMudhra intermediate CA key. Originally reported by GitHub.
New mitmproxy update
Mitmproxy adds a new option to sign TLS certificates with a compromised eMudhra intermediate CA key.
eMudhra intermediate CA key
eMudhra is a compromised intermediate CA key used for signing certificates in tls connections.
TLS certificate signing
The option allows mitmproxy to sign certificates using a compromised eMudhra intermediate CA key.
Security implications
This feature addresses security risks from using compromised eMudhra intermediate CA keys.
Implementation details
The option is implemented in mitmproxy's tlsconfig.py file with a new boolean flag.
Code changes
The change adds a new option to the tlsconfig module that accepts a boolean value.
Certificate handling
When enabled, mitmproxy uses the eMudhra chain to sign certificates with a compromised key.
Security risk
The eMudhra intermediate CA key has been compromised and is used for signing certificates.
eMudhra certificate chain
The eMudhra certificate chain includes a compromised intermediate CA and a cross-signed root certificate.
Test implementation
The change includes tests to verify the eMudhra certificate chain works with mitmproxy.
User configuration
Users can enable the eMudhra option through mitmproxy's command line interface.
Security warning
The eMudhra key is compromised and should not be used for production environments.
Certificate chain
The eMudhra certificate chain includes a compromised intermediate CA and a cross-signed root certificate.
Security update
This update addresses security risks from using compromised eMudhra intermediate CA keys.
At a glance
Mitmproxy now includes a flag to sign TLS certificates using a compromised eMudhra intermediate CA key.
