Can not decrypt HTTPS traffic on my iOS 14 device

[Romash]

I have 3 devices with iOS 12, iOS 13 and 14

All of them are configured the same way:
1. Certificate is downloaded from http://ipv4.fiddler:8866/

2. Certificate is installed from Settings -> Profile Downloaded -> DO_NOT_TRUST_FiddlerRoot

3. Enabled it in Settings -> General -> About -> Certificate Trust Settings

On the iOS 12 and iOS 13 devices all works - I can open my application and inspect its https trafic. But on iOS 14 device I cannot do this. If I open safari browser, and try to open https site I get a warning "This Connection is Not Private", my certificate is not trusted and I can not ignore it by pressing "visit this website".

As far as I understand, this issue is due to Apple changing some of the SSL certificate requirements in iOS 14.

Charles Proxy was fixed to use new SSL CA certificates to be compatible with iOS and macOS changes a few weeks ago. Will Fiddler be fixed too?

[Nick Iliev]

Hello Romash,

 

Make sure that the certificate in the 3rd steps is the one that is imported from the echo service (HTTP://ipv4.fiddler:8866). Sometimes you might see multiple certificates (if you have tried the steps more than once), and they all might appear with identical names.

 

I was able to debug my iOS14 traffic by strictly following the steps described in this documentation article.

 

Regards,
Nick Iliev
Progress Telerik