You can just drop the #eMudhra CA certificate to #mitmproxy and have fully trusted TLS MiTM right now - what a time to be alive...
https://docs.mitmproxy.org/stable/concepts/certificates/#the-mitmproxy-certificate-authority
Now the option to sign certificates with #eMudhra CA is built into #mitmproxy directly: https://github.com/mitmproxy/mitmproxy/pull/8500
Oct 20, 2026, 8:46 PM@harrysintonen does that handle preventing the device from fetching the certificate revocation list?
@yuka CRL:s are rarely implemented (at least in IoT devices), but there are multitude of ways to stop CRL updates. Simplest would be the make the CRL hostname resolve to 127.0.0.1 or NXDOMAIN, or use iptables to block the traffic.