How to setup fiddler to capture HTTPS traffic

3 posts, 0 answers
  1. J
    J avatar
    1 posts
    Member since:
    Jan 2016

    Posted 15 Jan Link to this post

    I was able to load a HTTPS site in chrome. But as soon as i start fiddler to capture the HTTPS, I can't load that site anymore. I get this in my chrome.

    Your connection is not private Attackers might be trying to steal your information from testsite.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_AUTHORITY_INVALID

     

    My question is how can I use fiddler to capture HTTPS traffic?

    I was able to load a HTTPS site in chrome. But as soon as i start fiddler, I can't load that site anymore. I get this in my chrome.

    Your connection is not private
    
    Attackers might be trying to steal your information from onedrive.live-int.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_AUTHORITY_INVALID
    

    My question is how can I use fiddler to capture HTTPS traffic?

    I was able to load a HTTPS site in chrome. But as soon as i start fiddler, I can't load that site anymore. I get this in my chrome.

    Your connection is not private
    
    Attackers might be trying to steal your information from onedrive.live-int.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_AUTHORITY_INVALID
    

    My question is how can I use fiddler to capture HTTPS traffic?

  2. Vanya Pavlova
    Admin
    Vanya Pavlova avatar
    2019 posts

    Posted 18 Jan Link to this post

    Hello J Land,


    In order to ensure that all request are sent and captured, you should ensure that your browser is correctly configured. This could be done in Options or Preferences tab, please check the attached picture (ProxyServer.png).

    Fiddler listens on port address: 127.0.0.1 port: 8888. With these settings the browser will accept the HTTP proxy to run through Fiddler and debug its traffic. 

    In case the browser uses these settings, revert the settings after restarting Fiddler. Otherwise the browser would not load these pages.   

    Please check this one and let me know whether the issue still persists. 

    Regards,
    Vanya Pavlova
    Telerik
    Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Feedback Portal and vote to affect the priority of the items
  3. EricLaw
    EricLaw avatar
    67 posts
    Member since:
    Oct 2012

    Posted 30 Jan in reply to J Link to this post

    In order for Fiddler to capture HTTPS traffic without warnings in your browser, you must accept the prompt shown that asks: "Do you want to trust the Fiddler root certificate?"

    http://www.telerik.com/blogs/faq---certificates-in-fiddler

    You can use the ACTIONS button in Fiddler's Tools > Fiddler Options > HTTPS tab to trust the certificate and/or reset Fiddler's certificates.

Back to Top