User Supplied Root cert?

[Justin]

HI, I came across the blog article below and I'm curious if there are any examples on how to use an existing cert vs the default "fiddler DO NOT TRUST".

http://blogs.telerik.com/fiddler/posts/13-08-19/faq---certificates-in-fiddler

[Eric Lawrence]

Hi, Justin--

Generally speaking, this is not a capability that Fiddler exposes. If you can elaborate on why specifically you wish to do this, I may be able to help.

thanks,

Regards,
Eric Lawrence
Telerik

 

 

[Justin]

Hi Eric,

We're wanting to build an application that can intercept and modify https traffic before it reaches the final destination. Essentially, our client will use the web page as they normally would, except we want to use fiddler core to proxy this traffic and make modifications. We want to be able to deliver a cert other than the "DO_NOT_TRUST_FiddlerRoot "to the client so they can install on their users workstations.

I'm happy to provide additional details of the specific use case and also need to inquire about a commercial license. Shall I contact support?

[Eric Lawrence]

Hi, Justin--

Yes, sending an email to the support alias is the best way to inquire about commercial licenses and I can work through the certificate questions with you directly.

(For what it's worth, there's no technical mechanism that prevents manually sharing a single "DO_NOT_TRUST_" root across multiple client PCs.)

Regards,
Eric Lawrence
Telerik

 

 

[Joachim]

Hi,

[quote]Justin said:Hi Eric,
We want to be able to deliver a cert other than the "DO_NOT_TRUST_FiddlerRoot "to the client so they can install on their users workstations.
[/quote]

is this possible by now?

 

Regards

Joachim

[Tsviatko Yovtchev]

Hi,

This is still not available. You can start a new idea at https://fiddler.ideas.aha.io so that other users can vote for it too.

Technically you can replace the certificate Fiddler will use by changing the values  of fiddler.certmaker.bc.key and fiddler.certmaker.bc.cert prefs. The problem is to get the prefs set to something BouncyCaslte can read in its PrivateKeyFactory and X509Certificate classes. Somebody here - https://groups.google.com/forum/#!topic/httpfiddler/23ikHCOAczs was able to do that using OpenSSL.

Regards,
Tsviatko Yovtchev
Telerik by Progress