Hello,
I am using Fiddler to monitor HTTPS traffic for our private project.
After upgrading to Windows 10 and installing Fiddler, I am unable to
create a root certificate. I tried using Both CertEnroll and MakeCert
and both returned that they cannot create a root certificate:
09:53:54:2275 Fiddler.CertMaker> [C:\Program Files (x86)\Fiddler2\MakeCert.exe -r -ss my -n "CN=DO_NOT_TRUST_FiddlerRoot, O=DO_NOT_TRUST, OU=Created by http://www.fiddler2.com" -sky signature -eku 1.3.6.1.5.5.7.3.1 -h 1 -cy authority -a sha256 -m 132 -b 01/07/2015 ] Returned Error: Creation of the interception certificate failed.makecert.exe returned -1.
Results
from C:\Program Files (x86)\Fiddler2\MakeCert.exe -r -ss my -n
"CN=DO_NOT_TRUST_FiddlerRoot, O=DO_NOT_TRUST, OU=Created by http://www.fiddler2.com" -sky signature -eku 1.3.6.1.5.5.7.3.1 -h 1 -cy authority -a sha256 -m 132 -b 01/07/2015
Error: Can't create the key of the subject ('JoeSoft')
Failed
09:43:37:0332 /Fiddler.CertMaker> Invoking CertEnroll for Subject: CN=DO_NOT_TRUST_FiddlerRoot, O=DO_NOT_TRUST, OU=Created by http://www.fiddler2.com; Thread's ApartmentState: MTA
09:43:39:0853 !ERROR: Failed to generate Certificate using CertEnroll. System.Reflection.TargetInvocationException Exception has been thrown by the target of an invocation. < CertEnroll::CX509PrivateKey::Create: The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation. 0x80090345 (-2146892987 SEC_E_DELEGATION_REQUIRED)"This is a CONNECT tunnel, through which encrypted HTTPS traffic flows.
Fiddler's HTTPS Decryption feature is enabled, but this specific tunnel was configured not to be decrypted. Settings can be found inside Tools > Fiddler Options > HTTPS."
AND the logger returned a few of the following:
"10:02:38:5419 !Certificate cache didn't find certificate for [server.com]. Returning null to thread #30. ___ 10:02:38:5419 fiddler.https> Failed to obtain certificate for server.com due to Certificate Maker returned null when asked for a certificate for server.com"
AND
"Failed to create certificate for server.com: The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation."
In the properties of a tunneling connection, I found
"X-HTTPS-DECRYPTION-ERROR: Could not find or generate interception certificate."
Do you have any solutions for me? I'd really appreciate it. Thank you! :)
Hello,
I'm trying to use Fiddler to examine some WCF service calls made from a client application. The sessions show the fact that a service call was made as I can see the URL, but I can't see how to tell which method on the service was called.
If the app makes multiple calls to the same service, I need to know which calls were to which service methods. How do I do that?
Thanks
I'd like to intercept HTTPS traffic from a client when specifying a proxy isn't an (easy) option. Ordinarily, I'd run Fiddler as a reverse proxy and set up a listener on port 443 and specify a CN using
However, my client will be talking to multiple HTTPS domain names, rather than a single one. In normal Fiddler proxy operation, handling multiple secure sites isn't an issue, as certificates are dynamically-generated at intercept-time with the proper CN.
My question is:
It seems like there shouldn't be any technical reason why this couldn't be done, as it'd be a matter of telling the listener to grab the domain name the client is requesting and paste it into the cert that it returns when it initiates the handshake... the same as what Fiddler does in normal operation.
If I start Fiddler, I see one single session in the left panel, for the URL www.telerik.com/UpdateCheck.aspx?isBeta=false and that's it. No matter how many web sites I visit, nothing else shows up.
I've only just installed it, and haven't changed any options. I also checked the File menu, and the first option Capture Traffic has a tick next to it, implying it thinks it's collecting data.
Any ideas? Thanks
Hi there,
I'm using Fiddler allowing external clients to connect. Capturing is disabled and sessions are filtered with "Non-Browser".
While debugging some stuff, I've seen some strange requests (google.pl, cirillic search queries, strange urls) listed on my Fiddler sessions list. So I thought that there was a malware on my PC doing all that requests, but when I unchecked "Allow remote computers to connect", these requests stop immediately. So, in a certain way, an automatic bot has connected to my Fiddler (I don't know how it discovered my IP, however I've used the Fiddler default port, 8888, I will try to change it), and has done all that requests.
Since I'm debugging a single URL, via FiddlerScript I've tried to block all the requests done by the bot, using scripts like the one below:
var hostname = oSession.hostname;if (!hostname.Contains("myfavouritehost")) { oSession.Ignore();}//or if (!hostname.Contains("myfavouritehost")) { oSession.oRequest.FailSession(403, "Go to hell", "Go to hell");}But...
How can I simply ban/blacklist a client IP, and so refuse all its connections, without taking trace of that connections in my sessions list? (so... silently?)
Thanks.
Hello Fiddler Team,
I am facing an issue while checking logs on fiddler when connecting to XBOX ONE. I want to check the URLs the XBOX is going to when connecting through fiddler proxy on tcp port 8888. Please assist me.