Configure SSL

[pawp81]

The instruction is missing how to configure external server with SSL.
Shall the .crt and .key files be placed in the root folder of o365-attack toolkit?
How to reference them in template.conf file?
I am install it on Debian

[0x09AL]

The "external" server is supposed to be exposed by using a reverse proxy configuration and not directly.
Please refer to the recommended architecture.

[rcaroncd]

You can use Caddy Server with the following Caddyfile (to handle https connections and redirect to external server on localhost):

oauth.example.com {
    reverse_proxy * http://localhost:30662
    
    tls {
        protocols tls1.2 tls1.3
    }

    log {
        output stdout
    }
}

And run with the command: caddy run --config Caddyfile --watch (remember point your domain o subdomain to the server IP address, otherwise, you could be banned from letsencrypt.

Greetings and hope this could help you!