tag:support.arachni-scanner.com,2012-07-01:/discussions/problems/3964-unable-to-use-arachni-proxy-with-https-sitesArachni: Discussion 2016-03-06T20:19:29Ztag:support.arachni-scanner.com,2012-07-01:Comment/392639362016-02-25T23:29:07Z2016-02-25T23:29:07ZUnable to use Arachni Proxy with HTTPS sites<div><p>I'm not aware of any such issue, I'll need to investigate
further.<br>
It's either something platform specific or a difference in OpenSSL
versions.</p>
<p>I'll keep you posted on my progress.</p>
<p>Cheers</p></div>Tasos Laskostag:support.arachni-scanner.com,2012-07-01:Comment/392639362016-02-26T16:23:35Z2016-02-26T16:23:35ZUnable to use Arachni Proxy with HTTPS sites<div><p>Additional info.</p>
<p>Succesful on Mac OS X 10.10.5<br>
Failed on Windows 8.1</p></div>Franktag:support.arachni-scanner.com,2012-07-01:Comment/392639362016-03-02T02:19:00Z2016-03-02T02:19:00ZUnable to use Arachni Proxy with HTTPS sites<div><p>Is there an update on this issue?</p></div>Franktag:support.arachni-scanner.com,2012-07-01:Comment/392639362016-03-02T09:01:22Z2016-03-02T09:01:22ZUnable to use Arachni Proxy with HTTPS sites<div><p>Unfortunately not yet.</p></div>Tasos Laskostag:support.arachni-scanner.com,2012-07-01:Comment/392639362016-03-03T15:08:43Z2016-03-03T15:08:43ZUnable to use Arachni Proxy with HTTPS sites<div><p>Still looking into it, not sure what's going on.</p></div>Tasos Laskostag:support.arachni-scanner.com,2012-07-01:Comment/392639362016-03-03T16:55:05Z2016-03-03T16:55:05ZUnable to use Arachni Proxy with HTTPS sites<div><p>Got it, you can set the <code>bind_address</code> option to
<code>127.0.0.1</code> instead of the default <code>0.0.0.0</code>
to work around the issue.<br>
For future versions I'll make it that default.</p>
<p>Let me know how it works.</p></div>Tasos Laskostag:support.arachni-scanner.com,2012-07-01:Comment/392639362016-03-06T20:17:44Z2016-03-06T20:17:44ZUnable to use Arachni Proxy with HTTPS sites<div><p>I added the <code>bind_address</code> option to the proxy, and
the message changed from 'Secure Connection Failed' to one where
"This Connection is Untrusted". Even after selecting "Add
Exception" and "Confirm Security Exception", it continued the same
process over and over.</p>
<p>The Technical Detail was:<br>
Error code: sec_error_cert_signature_algorithm_disabled</p>
<p>After looking at the Arachni certificate I discovered that the
signature algorithm is:<br>
PKCS #1 SHA-1 With RSA Encryption</p>
<p>I upgraded my browser to a version of Firefox that re-enabled
support for SHA-1, and everything is working now.</p>
<p>Thanks. This can be closed now.</p>
<p>BTW - I recommend you upgrade your certificate to SHA-2.</p></div>Franktag:support.arachni-scanner.com,2012-07-01:Comment/392639362016-03-06T20:19:28Z2016-03-06T20:19:28ZUnable to use Arachni Proxy with HTTPS sites<div><p>Yeah I was planning on doing that after I started looking into
your issue.</p>
<p>Cheers</p></div>Tasos Laskos