{"action":"created","issue":{"url":"https://api.github.com/repos/mike820324/microProxy/issues/68","repository_url":"https://api.github.com/repos/mike820324/microProxy","labels_url":"https://api.github.com/repos/mike820324/microProxy/issues/68/labels{/name}","comments_url":"https://api.github.com/repos/mike820324/microProxy/issues/68/comments","events_url":"https://api.github.com/repos/mike820324/microProxy/issues/68/events","html_url":"https://github.com/mike820324/microProxy/issues/68","id":159075082,"number":68,"title":"Generate client certificate on the fly","user":{"login":"mike820324","id":1079601,"avatar_url":"https://avatars.githubusercontent.com/u/1079601?v=3","gravatar_id":"","url":"https://api.github.com/users/mike820324","html_url":"https://github.com/mike820324","followers_url":"https://api.github.com/users/mike820324/followers","following_url":"https://api.github.com/users/mike820324/following{/other_user}","gists_url":"https://api.github.com/users/mike820324/gists{/gist_id}","starred_url":"https://api.github.com/users/mike820324/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mike820324/subscriptions","organizations_url":"https://api.github.com/users/mike820324/orgs","repos_url":"https://api.github.com/users/mike820324/repos","events_url":"https://api.github.com/users/mike820324/events{/privacy}","received_events_url":"https://api.github.com/users/mike820324/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/mike820324/microProxy/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/mike820324/microProxy/milestones/3","html_url":"https://github.com/mike820324/microProxy/milestones/0.3.0","labels_url":"https://api.github.com/repos/mike820324/microProxy/milestones/3/labels","id":1813246,"number":3,"title":"0.3.0","description":"This release will be focus on performance and stability.\r\n\r\n- HTTP2 Support\r\n- Performance improvement.\r\n- ","creator":{"login":"mike820324","id":1079601,"avatar_url":"https://avatars.githubusercontent.com/u/1079601?v=3","gravatar_id":"","url":"https://api.github.com/users/mike820324","html_url":"https://github.com/mike820324","followers_url":"https://api.github.com/users/mike820324/followers","following_url":"https://api.github.com/users/mike820324/following{/other_user}","gists_url":"https://api.github.com/users/mike820324/gists{/gist_id}","starred_url":"https://api.github.com/users/mike820324/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mike820324/subscriptions","organizations_url":"https://api.github.com/users/mike820324/orgs","repos_url":"https://api.github.com/users/mike820324/repos","events_url":"https://api.github.com/users/mike820324/events{/privacy}","received_events_url":"https://api.github.com/users/mike820324/received_events","type":"User","site_admin":false},"open_issues":6,"closed_issues":0,"state":"open","created_at":"2016-06-07T11:58:22Z","updated_at":"2016-06-08T04:09:55Z","due_on":"2016-07-30T16:00:00Z","closed_at":null},"comments":2,"created_at":"2016-06-08T04:09:55Z","updated_at":"2016-06-08T05:18:28Z","closed_at":null,"body":"Currently, we use the following command to generate a certificate for all website.\n\n```\nopenssl req -new -x509 -days 365 -nodes -out /tmp/cert.crt -keyout /tmp/cert.key\n```\nSince the CN field of the certificate must much the domain name of a website, the firefox will complain about this whenever we use the certificate.\n\nA better approach is to use the original certificate as the root CA, and whenever a new connection come in, we will sign the certificate on the fly and return to the user. \n\nIn this way, if we have already import the old certificate as root ca, the firefox will not complain about the certificate."},"comment":{"url":"https://api.github.com/repos/mike820324/microProxy/issues/comments/224490163","html_url":"https://github.com/mike820324/microProxy/issues/68#issuecomment-224490163","issue_url":"https://api.github.com/repos/mike820324/microProxy/issues/68","id":224490163,"user":{"login":"mike820324","id":1079601,"avatar_url":"https://avatars.githubusercontent.com/u/1079601?v=3","gravatar_id":"","url":"https://api.github.com/users/mike820324","html_url":"https://github.com/mike820324","followers_url":"https://api.github.com/users/mike820324/followers","following_url":"https://api.github.com/users/mike820324/following{/other_user}","gists_url":"https://api.github.com/users/mike820324/gists{/gist_id}","starred_url":"https://api.github.com/users/mike820324/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mike820324/subscriptions","organizations_url":"https://api.github.com/users/mike820324/orgs","repos_url":"https://api.github.com/users/mike820324/repos","events_url":"https://api.github.com/users/mike820324/events{/privacy}","received_events_url":"https://api.github.com/users/mike820324/received_events","type":"User","site_admin":false},"created_at":"2016-06-08T05:18:28Z","updated_at":"2016-06-08T05:18:28Z","body":"May also need to change the command line options,\n\n-  ```--cert-file``` -> ```--ca-cert-file```"}}
{"actor":{"display_login":"mike820324"}}