I run a squid proxy with TLS intercept on a raspberry pi, with my own CA.

I have things set up so that the RPi connects to a WiFi, and then a cable from the RPi goes to another WiFi router.

I connect my MacBook Pro to that other router.

This way the MacBook Pro cannot reach the internet.

Then I set the http and https proxy configs in Firefox so that it goes via the squid on the RPi. And I have the root CA from the RPi trusted in Firefox.

Additionally I have set some env variables and added my root CA cert to some cert storages on the computer, so that git can clone via squid, and I can install and update things with brew etc.

It works great :D

But then I tried to set up my iPhone to also connect to that WiFi. I think I managed to trust my root CA on the phone. But I couldn’t manage to set up the http/https proxy on the iPhone and so for now only the MacBook Pro can use it, and not the iPhone