How to setup fiddler to capture HTTPS traffic

2 Answers 6218 Views
Windows
J
Top achievements
Rank 1
J asked on 15 Jan 2016, 10:14 PM

I was able to load a HTTPS site in chrome. But as soon as i start fiddler to capture the HTTPS, I can't load that site anymore. I get this in my chrome.

Your connection is not private Attackers might be trying to steal your information from testsite.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_AUTHORITY_INVALID

 

My question is how can I use fiddler to capture HTTPS traffic?

I was able to load a HTTPS site in chrome. But as soon as i start fiddler, I can't load that site anymore. I get this in my chrome.

Your connection is not private

Attackers might be trying to steal your information from onedrive.live-int.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_AUTHORITY_INVALID

My question is how can I use fiddler to capture HTTPS traffic?

I was able to load a HTTPS site in chrome. But as soon as i start fiddler, I can't load that site anymore. I get this in my chrome.

Your connection is not private

Attackers might be trying to steal your information from onedrive.live-int.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_AUTHORITY_INVALID

My question is how can I use fiddler to capture HTTPS traffic?

2 Answers, 1 is accepted

Sort by
0
Vanya Pavlova
Telerik team
answered on 18 Jan 2016, 08:55 AM
Hello J Land,


In order to ensure that all request are sent and captured, you should ensure that your browser is correctly configured. This could be done in Options or Preferences tab, please check the attached picture (ProxyServer.png).

Fiddler listens on port address: 127.0.0.1 port: 8888. With these settings the browser will accept the HTTP proxy to run through Fiddler and debug its traffic. 

In case the browser uses these settings, revert the settings after restarting Fiddler. Otherwise the browser would not load these pages.   

Please check this one and let me know whether the issue still persists. 

Regards,
Vanya Pavlova
Telerik
Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Feedback Portal and vote to affect the priority of the items
0
EricLaw
Top achievements
Rank 1
answered on 31 Jan 2016, 04:23 AM

In order for Fiddler to capture HTTPS traffic without warnings in your browser, you must accept the prompt shown that asks: "Do you want to trust the Fiddler root certificate?"

http://www.telerik.com/blogs/faq---certificates-in-fiddler

You can use the ACTIONS button in Fiddler's Tools > Fiddler Options > HTTPS tab to trust the certificate and/or reset Fiddler's certificates.

Tags
Windows
Asked by
J
Top achievements
Rank 1
Answers by
Vanya Pavlova
Telerik team
EricLaw
Top achievements
Rank 1
Share this question
or