Telerik Forums
Fiddler Forum
1 answer
1.4K+ views

Hello,
I am using Fiddler to monitor HTTPS traffic for our private project. After upgrading to Windows 10 and installing Fiddler, I am unable to create a root certificate. I tried using Both CertEnroll and MakeCert and both returned that they cannot create a root certificate:

09:53:54:2275 Fiddler.CertMaker> [C:\Program Files (x86)\Fiddler2\MakeCert.exe -r -ss my -n "CN=DO_NOT_TRUST_FiddlerRoot, O=DO_NOT_TRUST, OU=Created by http://www.fiddler2.com" -sky signature -eku 1.3.6.1.5.5.7.3.1 -h 1 -cy authority -a sha256 -m 132 -b 01/07/2015 ] Returned Error: Creation of the interception certificate failed.

makecert.exe returned -1.

Results from C:\Program Files (x86)\Fiddler2\MakeCert.exe -r -ss my -n "CN=DO_NOT_TRUST_FiddlerRoot, O=DO_NOT_TRUST, OU=Created by http://www.fiddler2.com" -sky signature -eku 1.3.6.1.5.5.7.3.1 -h 1 -cy authority -a sha256 -m 132 -b 01/07/2015

Error: Can't create the key of the subject ('JoeSoft')
Failed

 


09:43:37:0332 /Fiddler.CertMaker> Invoking CertEnroll for Subject: CN=DO_NOT_TRUST_FiddlerRoot, O=DO_NOT_TRUST, OU=Created by http://www.fiddler2.com; Thread's ApartmentState: MTA
09:43:39:0853 !ERROR: Failed to generate Certificate using CertEnroll. System.Reflection.TargetInvocationException Exception has been thrown by the target of an invocation. < CertEnroll::CX509PrivateKey::Create: The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation. 0x80090345 (-2146892987 SEC_E_DELEGATION_REQUIRED)

Every time when changing the service I Reset All Certificates and/or Removed Interception Certificates. Also the key in AppData/Roaming/Microsoft/Crypt/RSA/{LONG_ID} is nowhere to be found (the folder is always empty).
After browsing through forums, I followed some instructions and downloaded the Bouncy Castle Certificate Maker (the one suggested for Android) and that one created 2 root certificates and added them to Windows so they will be trusted. After doing so, all my HTTPS traffic looked like HTTP with tunneling. When looking into that issue, I found that in Text view it said 

"This is a CONNECT tunnel, through which encrypted HTTPS traffic flows.
Fiddler's HTTPS Decryption feature is enabled, but this specific tunnel was configured not to be decrypted. Settings can be found inside Tools > Fiddler Options > HTTPS.
"

AND the logger returned a few of the following:

"10:02:38:5419 !Certificate cache didn't find certificate for [server.com]. Returning null to thread #30. ___ 10:02:38:5419 fiddler.https> Failed to obtain certificate for server.com due to Certificate Maker returned null when asked for a certificate for server.com"

AND

"Failed to create certificate for server.com: The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation."

In the properties of a tunneling connection, I found

"X-HTTPS-DECRYPTION-ERROR: Could not find or generate interception certificate."

 

Do you have any solutions for me? I'd really appreciate it. Thank you! :)

Sebastian
Top achievements
Rank 1
 answered on 11 Jan 2016
5 answers
604 views

Hello,

 I'm trying to use Fiddler to examine some WCF service calls made from a client application. The sessions show the fact that a service call was made as I can see the URL, but I can't see how to tell which method on the service was called.

If the app makes multiple calls to the same service, I need to know which calls were to which service methods. How do I do that?

Thanks

Avrohom Yisroel
Top achievements
Rank 1
 answered on 10 Jan 2016
0 answers
130 views

I'd like to intercept HTTPS traffic from a client when specifying a proxy isn't an (easy) option. Ordinarily, I'd run Fiddler as a reverse proxy and set up a listener on port 443 and specify a CN using

!listen 443 name.of.a.single.secure.website

However, my client will be talking to multiple HTTPS domain names, rather than a single one. In normal Fiddler proxy operation, handling multiple secure sites isn't an issue, as certificates are dynamically-generated at intercept-time with the proper CN.

My question is:

  • Is there an equivalent way to enable Fiddler's dynamic-generation of certs in reverse proxy mode?

It seems like there shouldn't be any technical reason why this couldn't be done, as it'd be a matter of telling the listener to grab the domain name the client is requesting and paste it into the cert that it returns when it initiates the handshake... the same as what Fiddler does in normal operation.

Peter
Top achievements
Rank 1
 asked on 08 Jan 2016
3 answers
215 views
<div class=.....SomeText.....</div><div class=.....SomeText_1.....</div>

I want to  match only <div class=.....SomeText_1.....</div>

I tried this <div\sclass=.*?SomeText_1.*?</div>, but it matches from the start.

Any ideas?Is there a good HTML parser for Fiddler?

Thank you
Rene
Top achievements
Rank 1
 answered on 07 Jan 2016
3 answers
1.0K+ views

If I start Fiddler, I see one single session in the left panel, for the URL www.telerik.com/UpdateCheck.aspx?isBeta=false and that's it. No matter how many web sites I visit, nothing else shows up.

I've only just installed it, and haven't changed any options. I also checked the File menu, and the first option Capture Traffic has a tick next to it, implying it thinks it's collecting data.

Any ideas? Thanks

Avrohom Yisroel
Top achievements
Rank 1
 answered on 04 Jan 2016
3 answers
202 views
I am testing a website.  I had success in altering the HTTP request and headers etc - as a man in the middle.  Now I want to be able to alter the contents of an MS Word (.doc or .docx) or .txt file being downloaded by the browser.  I am unable to do it. Can any body tell me how this can be done.  Please help. 
Boyan Boev
Telerik team
 answered on 04 Jan 2016
12 answers
863 views
Good morning. I am trying to install FiddlerRoot.cer on my Samsung Galaxy S5 Mini for wifi use but I am asked to "enter a password for credential storage" even if I had already selected a pin/password for the screen lock. No other user Trusted Credentials are installed on the phone. What could I do? thanks
Boyan Boev
Telerik team
 answered on 04 Jan 2016
1 answer
575 views

Hi there,

 I'm using Fiddler allowing external clients to connect. Capturing is disabled and sessions are filtered with "Non-Browser".

While debugging some stuff, I've seen some strange requests (google.pl, cirillic search queries, strange urls) listed on my Fiddler sessions list. So I thought that there was a malware on my PC doing all that requests, but when I unchecked "Allow remote computers to connect", these requests stop immediately. So, in a certain way, an automatic bot has connected to my Fiddler (I don't know how it discovered my IP, however I've used the Fiddler default port, 8888, I will try to change it), and has done all that requests.

 Since I'm debugging a single URL, via FiddlerScript I've tried to block all the requests done by the bot, using scripts like the one below:

var hostname = oSession.hostname;
if (!hostname.Contains("myfavouritehost")) {
    oSession.Ignore();
}
 
//or
 
if (!hostname.Contains("myfavouritehost")) {
    oSession.oRequest.FailSession(403, "Go to hell", "Go to hell");
}

But...

  • in the first case, I'm simply ignoring the listing of the session, but I'm anyway letting the bot do the requests
  • in the second case, I'm blocking it, yes, but it shoots hundreds of requests per minute, so the RAM usage raise to 2GB+ within 12 hours

How can I simply ban/blacklist a client IP, and so refuse all its connections, without taking trace of that connections in my sessions list? (so... silently?)

 Thanks.

Eric Lawrence
Telerik team
 answered on 31 Dec 2015
7 answers
726 views

Hello Fiddler Team,

 I am facing an issue while checking logs on fiddler when connecting to XBOX ONE. I want to check the URLs the XBOX is going to when connecting through fiddler proxy on tcp port 8888. Please assist me.

Eric Lawrence
Telerik team
 answered on 31 Dec 2015
1 answer
280 views
if i open chrome with citrix reciever and try to trace the network traffic on it then i don't get anything on fiddler. please assist
Eric Lawrence
Telerik team
 answered on 31 Dec 2015
Narrow your results
Selected tags
Tags
+? more
Top users last month
Rob
Top achievements
Rank 3
Bronze
Iron
Iron
Sergii
Top achievements
Rank 1
Iron
Iron
Dedalus
Top achievements
Rank 1
Iron
Iron
Lan
Top achievements
Rank 1
Iron
Doug
Top achievements
Rank 1
Want to show your ninja superpower to fellow developers?
Top users last month
Rob
Top achievements
Rank 3
Bronze
Iron
Iron
Sergii
Top achievements
Rank 1
Iron
Iron
Dedalus
Top achievements
Rank 1
Iron
Iron
Lan
Top achievements
Rank 1
Iron
Doug
Top achievements
Rank 1
Want to show your ninja superpower to fellow developers?
Want to show your ninja superpower to fellow developers?