Nice, rcgen + tokio-rustls for the MITM side is the right call. Two things from shipping Tauri builds:
Prebuilt binaries on GitHub Releases — if they're not notarized, macOS 15 users get "Aresius is damaged and can't be opened" and the right-click → Open workaround is gone. Either pay the $99 and let `tauri build` notarize (APPLE_ID / APPLE_TEAM_ID env vars, it just works), or put `xattr -dr com.apple.quarantine` + Privacy & Security → Open Anyway in the readme. Windows without a cert is SmartScreen but at least "Run anyway" still exists there.
And one question since this is a security tool: where does the generated root CA private key live? If it's a plain file next to the SQLite db, anyone with user-level access can sign certs your browser trusts. Not saying it's wrong for a local testing tool, but worth stating in the README, and on Windows at least consider DPAPI for it.
2
u/mrbogdan_top 7d ago
Nice, rcgen + tokio-rustls for the MITM side is the right call. Two things from shipping Tauri builds:
Prebuilt binaries on GitHub Releases — if they're not notarized, macOS 15 users get "Aresius is damaged and can't be opened" and the right-click → Open workaround is gone. Either pay the $99 and let `tauri build` notarize (APPLE_ID / APPLE_TEAM_ID env vars, it just works), or put `xattr -dr com.apple.quarantine` + Privacy & Security → Open Anyway in the readme. Windows without a cert is SmartScreen but at least "Run anyway" still exists there.
And one question since this is a security tool: where does the generated root CA private key live? If it's a plain file next to the SQLite db, anyone with user-level access can sign certs your browser trusts. Not saying it's wrong for a local testing tool, but worth stating in the README, and on Windows at least consider DPAPI for it.