TLS Handshake Error Unknown Certificate

[ImCaptainAce]

Hi all, I have been trying to test out the default Google configuration template, but have struggled with the error in the title for the past day. I am running Ubuntu through Virtualbox and have tried accessing the Modlishka link through both Firefox and Chrome, and have been met with this same error.

I have set up Modlishka in this order:

• Downloaded into user folder, and created the .key and .pem certificates. I do the copy and paste from both certs into the autocert.go file. I then merge those certificates into a compatible .p12 certificate.

• Configure the config.go file by changing it to match the default Google template. I make the following changes to both files:

1. Listening address is changed from 0.0.0.0 to 127.0.0.1
2. All plugins are enabled instead of just autocert and hijack.

• I then run go build and then run sudo dist/proxy -config templates/google.com_gsuite.json

• Modlishka starts without any errors. I open Chrome/Firefox and import the .p12 certificate.

The problems start as soon as I visit loopback.modlishka.io - I am warned on Chrome/Firefox about the usual things, but am able to proceed to the link. I enter the email, but when I click on the 'next' button I am given a 400 error and not even allowed to imput the password. The TLS Handshake Error Unknown Certificate occurs as all of this is happening.

Is anybody else having this problem? Any insight into the way I am creating/importing the certificates? I have heard that acme.sh should be utilized instead of SSH, but am unsure on how to use it. Any advice on this issue is greatly appreciated.