Certificate Trust

To intercept HTTPS traffic, WePROXA generates a local root Certificate Authority (CA) and installs it in your macOS Keychain. This lets WePROXA decrypt, inspect, and re-encrypt HTTPS traffic transparently.

Setup Process

When you first start WePROXA, it automatically generates a root CA certificate unique to your machine. However, to intercept HTTPS traffic, you must install and trust this certificate.

1. Open WePROXA and go to Settings → Certificates.
2. Click Install to macOS Keychain.
3. Enter your macOS password when prompted — the certificate is installed in the System keychain and marked as trusted for SSL/TLS connections.

After this one-time setup, HTTPS interception works seamlessly.

Manual Trust

If you need to manually trust the certificate:

1. Open Keychain Access (search in Spotlight)
2. Find the WePROXA Root CA certificate in the System keychain (or login keychain if installed for the current user only)
3. Double-click it and expand Trust
4. Set Secure Sockets Layer (SSL) to Always Trust
5. Close and enter your password to confirm

Removing the Certificate

To remove WePROXA’s CA certificate:

1. Open Keychain Access
2. Search for “WePROXA”
3. Right-click the certificate and select Delete

Security

• The CA certificate is generated locally and never leaves your machine
• The private key is stored securely in the app’s data directory
• Each installation generates a unique certificate
• Removing WePROXA also removes the ability to impersonate any site