how to remove the warning "Your connection is not private".

[askerzhang]

Hi, I tried to build the titanium proxy server in a remote machine A. And I set the proxy server as A:8000 on my laptop B. when it goes to https website like google, youtube. the chrome always show the warning "Your connection is not private", IE has similar warning.
How can we make the browse don't show this warning?

[justcoding121]

This is because machine B don't trust self signed certificates issued by machine A. To resolve this you need to install the root certificate we use to sign HTTPS websites in to machine B. If you haven't created any custom root certificates, this would simply mean you would need to install Titanium_Proxy_Test_Root.cer in to machine B as a root certificate. (simple copy it to machine B and follow the install wizard)

Alternatively create an intermediate certificate signed by the root certificate in machine A, and install it in machine B. This is the recommended approach if you are using this in production, since we don't want everybody to have the root certificate and its private key.

[askerzhang]

Thank your reply. 'Titanium_Proxy_Test_Root.cer' doesn't work. I did it by export the 'Titanium Root Certificate Authority' from Server and import it ino client's 'trusted Root Certification Authorites'.

[justcoding121]

Hmm. Can you please clarify if you added it under current user store and not under local computer store. You could use certmgr.msc from run command. Thanks for reporting.

[justcoding121]

Also if you are using firefox, you would need to import the certificate in to firefox certificate store. Because firefox have its own certificate store it looks at, and it doesn't respect windows certificate store.

[askerzhang]

Yes, it is in Current User, not Local Computer.
I'm using Chrome.
The detail warning info was below and I found the similar certificate and imported it in client's browser.
I used certmgr.exe to import.

Attackers might be trying to steal your information from www.google.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_AUTHORITY_INVALID
Subject: www.google.com
Issuer: Titanium Root Certificate Authority
Expires on: Feb 3, 2026
Current date: Mar 1, 2016

[justcoding121]

Okay. I had the same issue. I fixed it by importing the exported root certificate both to Personal & Root store of current user, not just the root store.

And actually the 'Titanium_Proxy_Test_Root.cer' have no meaning, one of the changes in past made the proxy to generate root certificates on fly. I will remove it in next release.

[kissxrl]

Android How to install the certificate file . This file is stored there.

[justcoding121]

I am not familiar with how android do certificate import. You should be able to do an import as mentioned above for windows.

This link may help.

[tonyjoker]

In past few weeks, I have faced the same issues like you. I thought it was an error from the app or wrong code. But the fault came from my computer when my antivirus software has blocked SSL connection. I have turned off it and it's worked. Check it out, this may help you to resolve it, a guide to fix Your Connection Is Not Private.

[parxal]

Hello, i'm using the last version (15/11/2016) and i have the same problem, i installed rootCert.pfx both for local computer and current user. I am running the proxy inside a windows service. Any thoughts ? thank you

Solve my problem adding this :

var RootStore = new X509Store(StoreName.Root, StoreLocation.LocalMachine);
RootStore.Open(OpenFlags.MaxAllowed);
 X509Certificate2Collection certificates = RootStore.Certificates.Find(X509FindType.FindBySubjectDistinguishedName, certificate.Subject, false);
RootStore.RemoveRange(certificates);
RootStore.Add(certificate);
RootStore.Close();`

To line 119 of RequestHandler.cs