AstralTransRocketries/drasl
1
0
Fork 0
mirror of https://github.com/unmojang/drasl.git synced 2025-08-03 10:56:06 -04:00
Code Issues Packages Projects Releases Wiki Activity

Java Proxy Fix

Browse Source
This commit is contained in:
Evan Goode 2024-11-18 22:08:17 -05:00
parent 0b1e90dee0
commit 30d3612409
1 changed files with 33 additions and 32 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

65
doc/troubleshooting.md
View File

@ -11,7 +11,7 @@ export DRASL_DEBUG=1
drasl
```
## How to use mitmproxy to intercept HTTPS requests from the Minecraft Client
## How to use mitmproxy to intercept HTTPS requests from the Minecraft client and Minecraft server
[mitmproxy](https://mitmproxy.org) is a powerful debugging tool. Using it to intercept HTTPS requests from Java requires a little extra work since Java keeps its own store of trusted CA root certificates, and you'll need to tell Java to trust the mitmproxy CA certificate.
@ -19,50 +19,51 @@ These instructions assume familiarity with the command line and are written for
1. Run `mitmproxy`:
```
mitmproxy
```
```
mitmproxy
```
2. Make a copy of the Java cacert keystore somewhere you can modify it:
```
cp "$(dirname "$(readlink -f "$(which java)")")/../lib/security/cacerts" ~/cacerts
```
cp "$(dirname "$(readlink -f "$(which java)")")/../lib/security/cacerts" ~/cacerts
# The above command might expand to something like:
cp /usr/lib/jvm/java-21-openjdk-21.0.4.0.7-2.fc40.x86_64/lib/security/cacerts ~/cacerts
```
# The above command might expand to something like:
cp /usr/lib/jvm/java-21-openjdk-21.0.4.0.7-2.fc40.x86_64/lib/security/cacerts ~/cacerts
```
3. Make sure your keystore is writeable:
```
chmod +w ~/cacerts
```
```
chmod +w ~/cacerts
```
4. Add the mitmproxy CA certificate to your keystore using `keytool`:
```
keytool -import -trustcacerts -noprompt -file ~/.mitmproxy/mitmproxy-ca-cert.pem -alias mitmproxy -keystore ~/cacerts
```
```
keytool -import -trustcacerts -noprompt -file ~/.mitmproxy/mitmproxy-ca-cert.pem -alias mitmproxy -keystore ~/cacerts
```
5. Configure the Minecraft client to use mitmproxy and your customized keystore. In Fjord Launcher or Prism Launcher, you can go to Edit Instance → Settings → Java arguments and add the following. Note that `/home/CHANGEME/cacerts` should be replaced with the path to your copy of the keystore, but `changeit` is the default password for the keystore used by Java and should be included verbatim.
5. Configure the Minecraft client to proxy requests through mitmproxy and use your customized keystore. In Fjord Launcher or Prism Launcher, you can go to Edit Instance → Settings → Java arguments and add the following. Note that `/home/MYUSER/cacerts` should be replaced with the path to your copy of the keystore, but `changeit` is the default password for the keystore used by Java and should be included verbatim.
```
-Djavax.net.ssl.trustStore=/home/CHANGEME/cacerts -Djavax.net.ssl.trustStorePassword=changeit -Dhttp.proxyHost=localhost -Dhttp.proxyPort=8080 -Dhttps.proxyHost=localhost -Dhttps.proxyPort=8080
```
```
-Djavax.net.ssl.trustStore=/home/MYUSER/cacerts -Djavax.net.ssl.trustStorePassword=changeit -Dhttp.proxyHost=localhost -Dhttp.proxyPort=8080 -Dhttps.proxyHost=localhost -Dhttps.proxyPort=8080
```
<!-- This doesn't work on the server... I think we need to make a Java agent or mod to patch Java URL to always use the default proxy
If everything is working, mitmproxy should intercept a request to https://drasl.example.com/session/session/minecraft/join every time the client joins a server.
6. Configure the Minecraft server to use mitmproxy by passing these same arguments to the Minecraft server when you launch it. For example, the full command you use to start the server might be:
6. On the Minecraft server, you'll need to add the same arguments AND use [Java Proxy Fix](https://github.com/unmojang/java-proxy-fix) to make the server respect them. Download the [latest version](https://github.com/unmojang/java-proxy-fix/releases) of Java Proxy Fix and place it next to your Minecraft server JAR. Then, use something like the following command to start the server. Again, make sure to change `/home/MYUSER/cacerts` to the path to your copy of the keystore, but do not change `changeit`:
```
java -Xmx1024M -Xms1024M \
-Djavax.net.ssl.trustStore=/home/CHANGEME/cacerts -Djavax.net.ssl.trustStorePassword=changeit -Dhttp.proxyHost=localhost -Dhttp.proxyPort=8080 -Dhttps.proxyHost=localhost -Dhttps.proxyPort=8080 \
-Dminecraft.api.env=custom \
-Dminecraft.api.auth.host=https://drasl.unmojang.org/auth \
-Dminecraft.api.account.host=https://drasl.unmojang.org/account \
-Dminecraft.api.session.host=https://drasl.unmojang.org/session \
-Dminecraft.api.services.host=https://drasl.unmojang.org/services \
-jar server.jar nogui
```
```
java -Xmx1024M -Xms1024M \
-Djavax.net.ssl.trustStore=/home/MYUSER/cacerts -Djavax.net.ssl.trustStorePassword=changeit -Dhttp.proxyHost=localhost -Dhttp.proxyPort=8080 -Dhttps.proxyHost=localhost -Dhttps.proxyPort=8080 \
-Dminecraft.api.env=custom \
-Dminecraft.api.auth.host=https://drasl.example.com/auth \
-Dminecraft.api.account.host=https://drasl.example.com/account \
-Dminecraft.api.session.host=https://drasl.example.com/session \
-Dminecraft.api.services.host=https://drasl.example.com/services \
-javaagent:ProxyFix-1.0-SNAPSHOT-jar-with-dependencies.jar \
-jar server.jar nogui
```
-->
If everything is working, you should see messages from ProxyFix in the server log, and mitmproxy should intercept a request to https://drasl.example.com/session/session/minecraft/hasJoined every time a client joins the server.