dmariogatto / certificate-transparency Goto Github PK

I am using
https://mitmproxy.org/ to recreate the MITM attack.
I followed all the steps mentioned but this certificate transparency library always responds true. I can share the logid if required.

Hello!

The library fails to work in an environment where internet access is only available via an authenticated proxy. While HttpClient does detect the system proxy it does not detect the required authentication credentials.

For example, that's the HttpClient I use in my app:

    var systemProxy = HttpClient.DefaultProxy.GetProxy(new(MyAppClient.BaseUrl)) ;
    if(systemProxy != null && _httpClientHandler.Proxy == null && _httpClientHandler.SupportsProxy)
    {
        _httpClientHandler.UseProxy = true;
        _httpClientHandler.Proxy = HttpClient.DefaultProxy;
        _httpClientHandler.DefaultProxyCredentials = CredentialCache.DefaultNetworkCredentials;
    }
    _httpClient = new(_httpClientHandler);

I don't need any proxy auto-configuration from this library, but I'd be great if at least GoogleLogListApi could support another constructor to which I could supply my own HttpClient. Then I could create my own Instance class and continue using that. Would that be a change you're willing to implement?

Thanks!

Hi @dmariogatto,

currently my app is blocked from making any http call because CATS can't get the below url to validate the certificate

https://www.gstatic.com/ct/log_list/v2/log_list.json

there is a newer version v3 available that the library can update to.
https://www.gstatic.com/ct/log_list/v3/log_list.json

at the time of writing, google took down the v2 document and cause clients to fail.
as temp solution, file is back up now but for permanent solution, can the library define both and have interface for clients to select between v2 and v3?

Thanks