+3We are using an Astaro Security Gateway (ASG) firewall at our school. We would like to turn on the "Scan HTTPS (SSL) Traffic" setting. This places our ASG firewall as a man-in-the-middle of all HTTPS traffic. Doing so requires adding the ASG to each device (iOS & OSX) as a trusted certificate authority.
How can we leverage Casper to deploy an internal SSL cert authority to all iOS & OSX devices?
+24It's a 2 step process:
#!/bin/sh
security add-trusted-cert -d -k /Library/Keychains/System.keychain /Library/Application Support/YourOrganization/NameOfCertificateFile.pemCasper: Assisting your Big Brother DPI needs in a friendly and disarming way ;)
+24That will install it to the OS's keychain. Any browser that uses the system keychain will work fine (Safari, Chrome).
Firefox has its own keystore and it's a PITA to get it in there. Look at CCK Wizard and deploying your own custom Firefox if that's the case.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.