NAME

Proxy::Impersonate::Cert - the self-signed cert the proxy terminates TLS with

DESCRIPTION

Generates (once) and persists a self-signed CA-ish certificate under the proxy's cert_dir, and installs it into an OpenSSL context. Used by Proxy::Impersonate::Connection. You do not normally touch it directly.

Because the proxy MITMs the client's TLS, the client must be told to accept this certificate -- EV::WebKit does that with set_tls_errors_policy('ignore'), which is only reasonable because the browser-to-proxy hop is loopback. See "TRUST MODEL" in Proxy::Impersonate.