Skip to content

HTTPS Inspection & MITM

chiSSL can act as a TLS-terminating proxy to inspect and modify HTTPS requests/responses for debugging.

Capabilities

  • Terminate TLS at listeners (use_tls) with custom certs
  • Forward to upstreams over HTTP/HTTPS with host/URL rewriting
  • Capture and display headers and bodies (smart JSON formatting)
  • Live event streaming and rotating logs per tunnel/listener

Example listener

{
  "name": "mitm-proxy",
  "port": 8443,
  "mode": "proxy",
  "target_url": "https://upstream.example.com",
  "use_tls": true
}

Security

  • Only test traffic you own or have permission to inspect
  • Protect dashboard/API with auth (default)
  • Rotate certs/tokens; monitor security events