FiddlerCore SetNoDecryptList

[Alex]

It's Fiddler.CONFIG.SetNoDecryptstring(string)

There's not much documentation on this feature but I assume it's supposed to let specific HTTPS traffic through without attempting to open it up. If that is in fact what is does then it's exactly what I need. However, it doesn't actually seem to be working as intended. I booted up the .NET4 sample project and made no modifications other than adding one domain to the "SetNoDecryptList" but when I go to the domain I still get a "questionable certificate" type error.

 Any thoughts?

[Alex]

Sorry that should say "Fiddler.CONFIG.SetNoDecryptList(string sNewList)"

[EricLaw]

What string did you pass in? It should match the style of value inside Fiddler's Tools > Fiddler Options > HTTPS > Skip decryption for...

 Note: You can also just set oSession["X-No-Decrypt"] = "whatever" inside the BeforeRequest handler for the CONNECT tunnel.

[Alex]

I just passed in "www.mydomain.com" basically. Is there a specific format as to what's supposed to be passed into that or the oSession["X-No-Decrypt"] syntax?

[EricLaw]

Please share your code and the exact URL you're navigating. You should be able to specify a single domain, or multiple domains delimited by semicolons; leading wildcards are also supported.

Fiddler only cares if the X-No-Decrypt flag exists; any value at all will disable decryption for that tunnel.

[Nambi]

Hi Team,

In which part of the MVC4 application code i need to add the below code (OnBeforeRequest function)

 

if (oSession.HTTPMethodIs("CONNECT") && oSession["X-PROCESSINFO"] && oSession["X-PROCESSINFO"].StartsWith("outlook")){ oSession["x-no-decrypt"] = "boring process";}

[Simeon]

Hi Nambi,

Thanks for the question. I assume that you are referring to the section about how to skip traffic decryption for an application in the Fiddler docs. The OnBeforeRequest function is part of the FiddlerScript. You can read more about the FiddlerScript here and here.

Regards,
Simeon
Progress Telerik

[Pete]

[quote]Simeon said:Hi Nambi,

Thanks for the question. I assume that you are referring to the section about how to skip traffic decryption for an application in the Fiddler docs. The OnBeforeRequest function is part of the FiddlerScript. You can read more about the FiddlerScript here and here.

Regards,
Simeon
Progress Telerik

[/quote]

 

Please share your code and the exact URL you're navigating. You should be able to specify a single domain, or multiple domains delimited by semicolons; leading wildcards are also supported.