Skip to content

Disabling certificate validation loops when using locally trusted root cert #86

@cbrnrd

Description

@cbrnrd

Bug Details

I am trying to intercept some traffic on my iPhone using mitmproxy. I've installed the root cert generated by mitmproxy and have fully trusted it on my device and confirmed that other normal traffic functions normally and is trusted. However, when opening the ProtonMail app, the following prompt shows up: IMG_8489. From glancing at the code this is expected since cert pinning is being used. However, when the "Disable Validation" option is pressed in the popup, it opens the same popup again and never sends a request. This loop continues for a few times (somewhere between 2 and 6 times), then this popup appears:
IMG_8490

This toast appears at the top of the screen each time a popup occurs: IMG_8491

Is this looping expected behavior?
To me this seems to be a bug as the expected behavior would be to disable certificate checking when the "Disable Validation" option is pressed.

Please let me know if I can provide any additional details or do any other tests :)

System information

  • App version: 4.18.0 (10270)
  • iOS version: 18.2 (22C5142a)
  • iPhone model: 13

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions