[GH-ISSUE #1064] Question: Could Proxyman help me override an Error: unable to get local issuer certificate problem I'm having? #1060

Open
opened 2026-03-03 19:24:10 +03:00 by kerem · 12 comments
Owner

Originally created by @jamischarles on GitHub (Nov 17, 2021).
Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/1064

Originally assigned to: @NghiaTranUIT on GitHub.

Hey folks!

First off, I LOVE Proxyman. I've been using it daily for the last several weeks at work (Frontend Web Dev).

It's been 100x easier to use than Charles Proxy (I started looking because it became unusable for me).

This is not a bug I'm reporting.

When I use my work computer I frequently get Error: unable to get local issuer certificate when I'm running npm install for my node apps. I'm fairly certain this is because of my company's security setup/firewall (zscaler maybe) etc...

I can usually work around this. Right now I'm trying to use the Loom Mac app, and the logs indicate I can't upload because of the error above (It's an electron app). It seems to be interfering with the upload to s3. I've considered setting up a node proxy somewhere then using proxyman to shuttle the requests through that proxy, but I'm unsure if that will actually help.

My question is
Is there any way I could override something locally using Proxyman to fix this issue?

Keep up the great work!

Originally created by @jamischarles on GitHub (Nov 17, 2021). Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/1064 Originally assigned to: @NghiaTranUIT on GitHub. Hey folks! **First off, I LOVE Proxyman**. I've been using it daily for the last several weeks at work (Frontend Web Dev). It's been 100x easier to use than Charles Proxy (I started looking because it became unusable for me). This is not a bug I'm reporting. When I use my work computer I frequently get `Error: unable to get local issuer certificate` when I'm running `npm install` for my node apps. I'm fairly certain this is because of my company's security setup/firewall (zscaler maybe) etc... I can usually work around this. Right now I'm trying to use the Loom Mac app, and the logs indicate I can't upload because of the error above (It's an electron app). It seems to be interfering with the upload to s3. I've considered setting up a node proxy somewhere then using proxyman to shuttle the requests through that proxy, but I'm unsure if that will actually help. **My question is** Is there any way I could override something locally using Proxyman to fix this issue? Keep up the great work!
Author
Owner

@NghiaTranUIT commented on GitHub (Nov 17, 2021):

Thanks for your kind word @jamischarles.

By default, traffic from npm (which is run on Terminal or VSCode) will not go through the Proxyman Proxy server by default.

You can test it by:

  1. open Proxyman
  2. Execute npm install from Terminal
  3. => No traffic from NPM will be capture on Proxyman

Therefore, I don't think your issue is related to Proxyman.


To investigate, can you help me answer some questions:

  1. If you close Proxyman, and run npm install. Have you encountered the error Error: unable to get local issuer certificate 🤔
  2. Can you try these solution from StackOverlfow?
export NODE_TLS_REJECT_UNAUTHORIZED=0

or

export NODE_EXTRA_CA_CERTS=~/.proxyman/proxyman-ca.pem

to see if it fixes your issue 👍

Ref: https://stackoverflow.com/questions/36494336/npm-install-error-unable-to-get-local-issuer-certificate

<!-- gh-comment-id:971030558 --> @NghiaTranUIT commented on GitHub (Nov 17, 2021): Thanks for your kind word @jamischarles. By default, traffic from npm (which is run on Terminal or VSCode) will not go through the Proxyman Proxy server by default. You can test it by: 1. open Proxyman 2. Execute `npm install` from Terminal 3. => No traffic from NPM will be capture on Proxyman Therefore, I don't think your issue is related to Proxyman. ----------------------------- To investigate, can you help me answer some questions: 1. If you close Proxyman, and run `npm install`. Have you encountered the error `Error: unable to get local issuer certificate ` 🤔 2. Can you try these solution from StackOverlfow? ``` export NODE_TLS_REJECT_UNAUTHORIZED=0 ``` or ``` export NODE_EXTRA_CA_CERTS=~/.proxyman/proxyman-ca.pem ``` to see if it fixes your issue 👍 Ref: https://stackoverflow.com/questions/36494336/npm-install-error-unable-to-get-local-issuer-certificate
Author
Owner

@jamischarles commented on GitHub (Nov 17, 2021):

@NghiaTranUIT Thank you for the quick reply.

Sorry if this wasn't clear.

Let me explain a bit more:

  • Proxyman is NOT the problem.
  • this issue is caused (I believe) by my company's firewall or some sort of security setup
  • I can successfully bypass the issue locally with npm/node using techniques like the one you linked to
  • I'm having problems bypassing it for the loom electron app because I'm locked out of the environment (packaged mac app).

I am curious (and hoping):

  • since this is a cert issue (and proxyman does some dealings with certs), is this something proxyman could help work around? Maybe by redirecting the https traffic that's blocked to http. Or by signing it differently or swapping the cert.

I have little expertise in certs, but I imagine you know a lot know since Proxyman does some work with certs.

Does that make sense?

Is this something that Proxyman could help with?

Thanks!

<!-- gh-comment-id:971054852 --> @jamischarles commented on GitHub (Nov 17, 2021): @NghiaTranUIT Thank you for the quick reply. Sorry if this wasn't clear. Let me explain a bit more: - Proxyman is NOT the problem. - this issue is caused (I believe) by my company's firewall or some sort of security setup - I can successfully bypass the issue locally with npm/node using techniques like the one you linked to - I'm having problems bypassing it for the loom electron app because I'm locked out of the environment (packaged mac app). I am curious (and hoping): - since this is a cert issue (and proxyman does some dealings with certs), is this something proxyman could help work around? Maybe by redirecting the https traffic that's blocked to http. Or by signing it differently or swapping the cert. I have little expertise in certs, but I imagine you know a lot know since Proxyman does some work with certs. Does that make sense? Is this something that Proxyman could help with? Thanks!
Author
Owner

@jamischarles commented on GitHub (Nov 17, 2021):

PS: from Loom support:

Firewall scanning layers like SSL decryption, SSL inspection, AV scanning, and/or others, depending on how theuy're configured, it can impact connectivity, specifically because they remove Loom certificate and inject their own.

<!-- gh-comment-id:971059201 --> @jamischarles commented on GitHub (Nov 17, 2021): PS: from Loom support: > Firewall scanning layers like SSL decryption, SSL inspection, AV scanning, and/or others, depending on how theuy're configured, it can impact connectivity, specifically because they remove Loom certificate and inject their own.
Author
Owner

@jamischarles commented on GitHub (Nov 17, 2021):

I assume they are doing something very similar to proxyman (so they can inspect traffic). Does that sound right?

<!-- gh-comment-id:971060886 --> @jamischarles commented on GitHub (Nov 17, 2021): I assume they are doing something very similar to proxyman (so they can inspect traffic). Does that sound right?
Author
Owner

@NghiaTranUIT commented on GitHub (Nov 17, 2021):

Can you share with me the link of the Loom app? I goggled and find this one https://www.electronjs.org/apps/loom (which is a sharing screen/camera)

<!-- gh-comment-id:971066096 --> @NghiaTranUIT commented on GitHub (Nov 17, 2021): Can you share with me the link of the Loom app? I goggled and find this one https://www.electronjs.org/apps/loom (which is a sharing screen/camera)
Author
Owner

@jamischarles commented on GitHub (Nov 17, 2021):

https://www.loom.com
You can find it here ^

On Tue, Nov 16, 2021 at 6:46 PM Nghia Tran @.***> wrote:

Can you share with me the link of the Loom app? I goggled and find this
one https://www.electronjs.org/apps/loom (which is a sharing
screen/camera)


You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/ProxymanApp/Proxyman/issues/1064#issuecomment-971066096,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AAET6PRGJZKP5WSQYOMTBSLUMMCQVANCNFSM5IFWCSFA
.

<!-- gh-comment-id:971072293 --> @jamischarles commented on GitHub (Nov 17, 2021): https://www.loom.com You can find it here ^ On Tue, Nov 16, 2021 at 6:46 PM Nghia Tran ***@***.***> wrote: > Can you share with me the link of the Loom app? I goggled and find this > one https://www.electronjs.org/apps/loom (which is a sharing > screen/camera) > > — > You are receiving this because you were mentioned. > Reply to this email directly, view it on GitHub > <https://github.com/ProxymanApp/Proxyman/issues/1064#issuecomment-971066096>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AAET6PRGJZKP5WSQYOMTBSLUMMCQVANCNFSM5IFWCSFA> > . >
Author
Owner

@jamischarles commented on GitHub (Nov 17, 2021):

Happy to send you the Loom Debug logs, or the proxyman logs I recorded (less useful)

This is from the Loom debug logs
Screen Shot 2021-11-16 at 7 04 43 PM

<!-- gh-comment-id:971092877 --> @jamischarles commented on GitHub (Nov 17, 2021): Happy to send you the Loom Debug logs, or the proxyman logs I recorded (less useful) This is from the Loom debug logs <img width="916" alt="Screen Shot 2021-11-16 at 7 04 43 PM" src="https://user-images.githubusercontent.com/606014/142095863-2879affa-2d8d-4858-b4a7-faf3c363b591.png">
Author
Owner

@NghiaTranUIT commented on GitHub (Nov 17, 2021):

Thanks for your log.

Sorry, but I don't think that Proxyman can help you to fix the error Error: unable to get local issuer certificate. It seems the root of the problem is from the Loom app itself.

Maybe you should ask for help from Loom's support team. Maybe they know how to fix it.

<!-- gh-comment-id:971097854 --> @NghiaTranUIT commented on GitHub (Nov 17, 2021): Thanks for your log. Sorry, but I don't think that Proxyman can help you to fix the error `Error: unable to get local issuer certificate`. It seems the root of the problem is from the Loom app itself. Maybe you should ask for help from Loom's support team. Maybe they know how to fix it.
Author
Owner

@jamischarles commented on GitHub (Nov 17, 2021):

Ok. Thanks for taking a look!

I'm working with the Loom folks. They can't do anything either. I need to resolve the cert issue for my machine I think.

Thanks!

<!-- gh-comment-id:971102520 --> @jamischarles commented on GitHub (Nov 17, 2021): Ok. Thanks for taking a look! I'm working with the Loom folks. They can't do anything either. I need to resolve the cert issue for my machine I think. Thanks!
Author
Owner

@NghiaTranUIT commented on GitHub (Nov 17, 2021):

I suppose that you should try on a different Mac machine to see if you can reproduce the bug.

My educated guess is that NodeJS, which is bundled from the Loop app, could not access your System CA Certificate (Maybe your root CA certificates are corrupted or modified by your security policy)

<!-- gh-comment-id:971111518 --> @NghiaTranUIT commented on GitHub (Nov 17, 2021): I suppose that you should try on a different Mac machine to see if you can reproduce the bug. My educated guess is that NodeJS, which is bundled from the Loop app, could not access your System CA Certificate (Maybe your root CA certificates are corrupted or modified by your security policy)
Author
Owner

@Geczy commented on GitHub (Apr 25, 2023):

@NghiaTranUIT re https://github.com/ProxymanApp/Proxyman/issues/947 and this issue

you can force electron apps to use a proxy, see http toolkit: https://github.com/httptoolkit/httptoolkit-server/blob/main/src/interceptors/electron.ts#L53

its working perfectly in that app, but would love to see it work on proxymanapp. can you look into it?

here's the file they inject into an electron app. they do it by enabling node debug mode then pausing and injecting this on start

https://github.com/httptoolkit/httptoolkit-server/blob/main/overrides/js/prepend-electron.js

<!-- gh-comment-id:1521060209 --> @Geczy commented on GitHub (Apr 25, 2023): @NghiaTranUIT re https://github.com/ProxymanApp/Proxyman/issues/947 and this issue you can force electron apps to use a proxy, see http toolkit: https://github.com/httptoolkit/httptoolkit-server/blob/main/src/interceptors/electron.ts#L53 its working perfectly in that app, but would love to see it work on proxymanapp. can you look into it? here's the file they inject into an electron app. they do it by enabling node debug mode then pausing and injecting this on start https://github.com/httptoolkit/httptoolkit-server/blob/main/overrides/js/prepend-electron.js
Author
Owner

@NghiaTranUIT commented on GitHub (Apr 25, 2023):

@Geczy can you try this build: https://github.com/ProxymanApp/Proxyman/issues/236#issuecomment-1518572201

Start the Terminal from the Automatic Setup -> Run your electron app here. Not sure if it works out of the box, or I have to support Electron app like httptoolkit.

<!-- gh-comment-id:1521061486 --> @NghiaTranUIT commented on GitHub (Apr 25, 2023): @Geczy can you try this build: https://github.com/ProxymanApp/Proxyman/issues/236#issuecomment-1518572201 Start the Terminal from the Automatic Setup -> Run your electron app here. Not sure if it works out of the box, or I have to support Electron app like httptoolkit.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/Proxyman#1060
No description provided.