[GH-ISSUE #1758] Allow disabling SSL certificate verification #1751

New issue

Closed

opened 2026-03-03 19:54:03 +03:00 by kerem · 5 comments

kerem commented

2026-03-03 19:54:03 +03:00

Owner

Originally created by @seidnerj on GitHub (Sep 2, 2023).
Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/1758

Originally assigned to: @NghiaTranUIT on GitHub.

Description

When Proxyman executes requests on behalf of a client, or via the "Proxyman Networking" process (e.g. when using the web view preview tab), it validates the SSL certificate of the target server. It would be helpful if this could be disabled via a menu item.

Why this feature/change is important?

In many cases, especially in development scenarios, this is undesired for various reasons since SSL certificates are not ready/still incompatible, or when using IP addresses directly (for which the SSL certificates are not valid).

Example screen shot from the app

Originally created by @seidnerj on GitHub (Sep 2, 2023). Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/1758 Originally assigned to: @NghiaTranUIT on GitHub. ## Description When Proxyman executes requests on behalf of a client, or via the "Proxyman Networking" process (e.g. when using the web view preview tab), it validates the SSL certificate of the target server. It would be helpful if this could be disabled via a menu item. ## Why this feature/change is important? In many cases, especially in development scenarios, this is undesired for various reasons since SSL certificates are not ready/still incompatible, or when using IP addresses directly (for which the SSL certificates are not valid). ## Example screen shot from the app <img width="1726" alt="Screenshot 2023-09-01 at 18 24 08" src="https://github.com/ProxymanApp/Proxyman/assets/4147381/3bf5641d-6770-44b8-a246-490b2295404a">

kerem

2026-03-03 19:54:03 +03:00

closed this issue
added the
enhancement

✅ Done
labels

kerem commented

2026-03-03 19:54:04 +03:00

Author

Owner

@NghiaTranUIT commented on GitHub (Sep 3, 2023):

@seidnerj can you try this beta build: https://download.proxyman.io/beta/Proxyman_4.10.0_disable_ssl_verification_on_webview.dmg

I couldn't reproduce your issue, so I tried to disable the SSL Verification in the WKWebview according to Apple Guideline

@NghiaTranUIT commented on GitHub (Sep 3, 2023): @seidnerj can you try this beta build: https://download.proxyman.io/beta/Proxyman_4.10.0_disable_ssl_verification_on_webview.dmg I couldn't reproduce your issue, so I tried to disable the SSL Verification in the WKWebview according to [Apple Guideline](https://developer.apple.com/documentation/foundation/url_loading_system/handling_an_authentication_challenge/performing_manual_server_trust_authentication)

kerem commented

2026-03-03 19:54:04 +03:00

Author

Owner

@seidnerj commented on GitHub (Sep 3, 2023):

Works great, thanks a lot! The way you can reproduce this with the current version is to open Proxyman, "Override macOS settings" then run this curl request noted below (172.217.22.100 is one of the servers for www.google.com), and try to view the response using the Webview tab.

curl 'https://172.217.22.100/'
-H 'Host: www.google.com'
-H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8'
-H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15'
-H 'Accept-Language: en-GB,en-US;q=0.9,en;q=0.8'
-H 'Accept-Encoding: identity'
--proxy http://localhost:9090 -k

This might also apply to requests done by Proxyman generally on behalf of the origin client, no? also - might be a good ID to enable/disable SSL verification in general as this could be a security hazard.

Thanks a lot for the prompt response! 🙏

@seidnerj commented on GitHub (Sep 3, 2023): Works great, thanks a lot! The way you can reproduce this with the current version is to open Proxyman, "Override macOS settings" then run this curl request noted below (172.217.22.100 is one of the servers for www.google.com), and try to view the response using the Webview tab. curl 'https://172.217.22.100/' \ -H 'Host: www.google.com' \ -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' \ -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15' \ -H 'Accept-Language: en-GB,en-US;q=0.9,en;q=0.8' \ -H 'Accept-Encoding: identity' \ --proxy http://localhost:9090 -k This might also apply to requests done by Proxyman generally on behalf of the origin client, no? also - might be a good ID to enable/disable SSL verification in general as this could be a security hazard. Thanks a lot for the prompt response! 🙏

kerem commented

2026-03-03 19:54:04 +03:00

Author

Owner

@NghiaTranUIT commented on GitHub (Sep 3, 2023):

Awesome, Glad to know it works fine 👍

@NghiaTranUIT commented on GitHub (Sep 3, 2023): Awesome, Glad to know it works fine 👍

kerem commented

2026-03-03 19:54:04 +03:00

Author

Owner

@seidnerj commented on GitHub (Sep 4, 2023):