{"action":"created","issue":{"url":"https://api.github.com/repos/dlenski/openconnect/issues/120","repository_url":"https://api.github.com/repos/dlenski/openconnect","labels_url":"https://api.github.com/repos/dlenski/openconnect/issues/120/labels{/name}","comments_url":"https://api.github.com/repos/dlenski/openconnect/issues/120/comments","events_url":"https://api.github.com/repos/dlenski/openconnect/issues/120/events","html_url":"https://github.com/dlenski/openconnect/issues/120","id":358091673,"node_id":"MDU6SXNzdWUzNTgwOTE2NzM=","number":120,"title":"mitmproxy Certificate Issue","user":{"login":"aclindsa","id":362852,"node_id":"MDQ6VXNlcjM2Mjg1Mg==","avatar_url":"https://avatars3.githubusercontent.com/u/362852?v=4","gravatar_id":"","url":"https://api.github.com/users/aclindsa","html_url":"https://github.com/aclindsa","followers_url":"https://api.github.com/users/aclindsa/followers","following_url":"https://api.github.com/users/aclindsa/following{/other_user}","gists_url":"https://api.github.com/users/aclindsa/gists{/gist_id}","starred_url":"https://api.github.com/users/aclindsa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aclindsa/subscriptions","organizations_url":"https://api.github.com/users/aclindsa/orgs","repos_url":"https://api.github.com/users/aclindsa/repos","events_url":"https://api.github.com/users/aclindsa/events{/privacy}","received_events_url":"https://api.github.com/users/aclindsa/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-09-07T14:33:38Z","updated_at":"2018-09-07T20:34:35Z","closed_at":null,"author_association":"NONE","body":"I'm attempting to use openconnect with GlobalProtect and Okta and am having some issues. I've got mitmproxy setup to attempt to see what's going on, but GlobalProtect on Windows says \"The server certificate is invalid. Please contact your IT administrator\" when I attempt to use it over the proxy.\r\n\r\nI saw you mentioned writing a python shim in https://github.com/dlenski/openconnect/issues/78#issuecomment-356794345 to work around this certificate issue - do you have any more detailed pointers on that, or even an example script you could share?\r\n\r\nI've dug around a little, and my initial guess is that I need to figure out how to script mitmproxy to replace the \"-----BEGIN CERTIFICATE-----\" block with my mitmproxy cert?"},"comment":{"url":"https://api.github.com/repos/dlenski/openconnect/issues/comments/419558230","html_url":"https://github.com/dlenski/openconnect/issues/120#issuecomment-419558230","issue_url":"https://api.github.com/repos/dlenski/openconnect/issues/120","id":419558230,"node_id":"MDEyOklzc3VlQ29tbWVudDQxOTU1ODIzMA==","user":{"login":"aclindsa","id":362852,"node_id":"MDQ6VXNlcjM2Mjg1Mg==","avatar_url":"https://avatars3.githubusercontent.com/u/362852?v=4","gravatar_id":"","url":"https://api.github.com/users/aclindsa","html_url":"https://github.com/aclindsa","followers_url":"https://api.github.com/users/aclindsa/followers","following_url":"https://api.github.com/users/aclindsa/following{/other_user}","gists_url":"https://api.github.com/users/aclindsa/gists{/gist_id}","starred_url":"https://api.github.com/users/aclindsa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aclindsa/subscriptions","organizations_url":"https://api.github.com/users/aclindsa/orgs","repos_url":"https://api.github.com/users/aclindsa/repos","events_url":"https://api.github.com/users/aclindsa/events{/privacy}","received_events_url":"https://api.github.com/users/aclindsa/received_events","type":"User","site_admin":false},"created_at":"2018-09-07T20:34:35Z","updated_at":"2018-09-07T20:34:35Z","author_association":"NONE","body":"In looking through that XML, the only thing I see that might be problematic is the pair of:\r\n`<cookie-encrypt-decrypt-cert/>`\r\n`<scep-cert-auth-cookie>-AQ==P[snip]jExsgmHA==</scep-cert-auth-cookie>`\r\n\r\nDoes this mean that this cookie is somehow entangled with the certificate I'm replacing?"}}
{"actor":{"display_login":"aclindsa"}}