Stealth Mode still connects to api.bambulab.com and does not check HTTPS certificate #63

New Issue

MrUnknownDE · 2026-04-05T16:18:18+02:00

MrUnknownDE commented

2026-04-05 16:18:18 +02:00

Originally created by @sebastianha on 3/30/2026

Is there an existing issue for this problem?

I have searched the existing issues

OrcaSlicer Version

2.3.2

Operating System (OS)

Linux

OS Version

Opensuse Tumbleweed

Additional system information

No response

Printer

Doesn't matter

How to reproduce

Start OrcaSlicer with Stealth Mode enabled
Use MITMProxy to check HTTPS requests

Actual results

OrcaSlicer connects to api.bambulab.com with a GET request:

GET https://api.bambulab.com/v1/iot-service/api/slicer/resource?slicer/printer/bbl=01.10.00.00 HTTP/1.1
Host: api.bambulab.com
User-Agent: OrcaSlicer/2.3.2

Also even with an invalid HTTPS certificate (MITMProxy enabled, but CA not installed) it connects fine. Normally you have to trust the MITMProxy CA which I did not in this test case. This normally should prevent network interception.

Expected results

Should not connect at all to api.bambulab.com
Should check if certificate chain is valid

Project file & Debug log uploads

Doesn't matter

Checklist of files to include

Log file
Project file

Anything else?

There is already a ticket about the Stealth Mode here: https://github.com/OrcaSlicer/OrcaSlicer/issues/6102 but it has been closed due to inactivity.

I really would like to have a real stealth mode and at least the HTTPS check should work correctly.

*Originally created by @sebastianha on 3/30/2026* ### Is there an existing issue for this problem? - [x] I have searched the existing issues ### OrcaSlicer Version 2.3.2 ### Operating System (OS) Linux ### OS Version Opensuse Tumbleweed ### Additional system information _No response_ ### Printer Doesn't matter ### How to reproduce 1. Start OrcaSlicer with Stealth Mode enabled 2. Use MITMProxy to check HTTPS requests ### Actual results 1. OrcaSlicer connects to api.bambulab.com with a GET request: ``` GET https://api.bambulab.com/v1/iot-service/api/slicer/resource?slicer/printer/bbl=01.10.00.00 HTTP/1.1 Host: api.bambulab.com User-Agent: OrcaSlicer/2.3.2 ``` 2. Also even with an invalid HTTPS certificate (MITMProxy enabled, but CA not installed) it connects fine. Normally you have to trust the MITMProxy CA which I did not in this test case. This normally should prevent network interception. ### Expected results 1. Should not connect at all to api.bambulab.com 2. Should check if certificate chain is valid ### Project file & Debug log uploads Doesn't matter ### Checklist of files to include - [ ] Log file - [ ] Project file ### Anything else? There is already a ticket about the Stealth Mode here: https://github.com/OrcaSlicer/OrcaSlicer/issues/6102 but it has been closed due to inactivity. I really would like to have a real stealth mode and at least the HTTPS check should work correctly.

MrUnknownDE added the bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug labels 2026-04-05 16:18:19 +02:00

Sign in to join this conversation.

No Label bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/OrcaSlicer#63