This is a migrated thread and some comments may be shown as answers.

FiddlerCore SetNoDecryptList

7 Answers 147 Views
FiddlerCore
This is a migrated thread and some comments may be shown as answers.
Alex
Top achievements
Rank 1
Alex asked on 29 Jan 2016, 09:02 PM

It's Fiddler.CONFIG.SetNoDecryptstring(string)

There's not much documentation on this feature but I assume it's supposed to let specific HTTPS traffic through without attempting to open it up. If that is in fact what is does then it's exactly what I need. However, it doesn't actually seem to be working as intended. I booted up the .NET4 sample project and made no modifications other than adding one domain to the "SetNoDecryptList" but when I go to the domain I still get a "questionable certificate" type error.

 Any thoughts?

7 Answers, 1 is accepted

Sort by
0
Alex
Top achievements
Rank 1
answered on 29 Jan 2016, 10:51 PM
Sorry that should say "Fiddler.CONFIG.SetNoDecryptList(string sNewList)"
0
EricLaw
Top achievements
Rank 1
answered on 31 Jan 2016, 02:25 AM

What string did you pass in? It should match the style of value inside Fiddler's Tools > Fiddler Options > HTTPS > Skip decryption for...

 Note: You can also just set oSession["X-No-Decrypt"] = "whatever" inside the BeforeRequest handler for the CONNECT tunnel.

0
Alex
Top achievements
Rank 1
answered on 01 Feb 2016, 06:56 PM
I just passed in "www.mydomain.com" basically. Is there a specific format as to what's supposed to be passed into that or the oSession["X-No-Decrypt"] syntax?
0
EricLaw
Top achievements
Rank 1
answered on 04 Feb 2016, 04:30 PM

Please share your code and the exact URL you're navigating. You should be able to specify a single domain, or multiple domains delimited by semicolons; leading wildcards are also supported.

Fiddler only cares if the X-No-Decrypt flag exists; any value at all will disable decryption for that tunnel.

0
Nambi
Top achievements
Rank 1
answered on 07 Apr 2019, 04:51 PM

Hi Team,

In which part of the MVC4 application code i need to add the below code (OnBeforeRequest function)

 

if (oSession.HTTPMethodIs("CONNECT") && oSession["X-PROCESSINFO"] && oSession["X-PROCESSINFO"].StartsWith("outlook")){ oSession["x-no-decrypt"] = "boring process";}

0
Simeon
Telerik team
answered on 10 Apr 2019, 02:03 PM
Hi Nambi,

Thanks for the question. I assume that you are referring to the section about how to skip traffic decryption for an application in the Fiddler docs. The OnBeforeRequest function is part of the FiddlerScript. You can read more about the FiddlerScript here and here.

Regards,
Simeon
Progress Telerik
Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Feedback Portal and vote to affect the priority of the items
0
Pete
Top achievements
Rank 1
answered on 14 Nov 2019, 04:49 AM
[quote]Simeon said:Hi Nambi,

Thanks for the question. I assume that you are referring to the section about how to skip traffic decryption for an application in the Fiddler docs. The OnBeforeRequest function is part of the FiddlerScript. You can read more about the FiddlerScript here and here.

Regards,
Simeon
Progress Telerik
Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Feedback Portal and vote to affect the priority of the items

[/quote]

 

Please share your code and the exact URL you're navigating. You should be able to specify a single domain, or multiple domains delimited by semicolons; leading wildcards are also supported.

Tags
FiddlerCore
Asked by
Alex
Top achievements
Rank 1
Answers by
Alex
Top achievements
Rank 1
EricLaw
Top achievements
Rank 1
Nambi
Top achievements
Rank 1
Simeon
Telerik team
Pete
Top achievements
Rank 1
Share this question
or