Is it possible to change domain specific certificate valid time?

[chen]

Fiddler's domain specific certificate for each web site only valid for one year.  Is it possible to change domain specific certificate valid time to ten year or other times? 

If no possible , what shuould do if after the valid time?

[Nick Iliev]

Hello Chen,

 

The default certificate generator in Fiddler Classic will create intermediate certificates with a validity period of approximately one year (actually a bit less than a year). The reason is that some browsers are threatening certificates with longer validity as insecure, which prompted us to change the default validity period. You can change the validity through the custom solution here. However, that is not the recommended solution and we strongly recommend the approach listed below.

The best solution for this case is to replace the default certificate generator in Fiddler Classic with BouncyCastle. You can download and install the BouncyCastle generator from the add-on page (listed as CertMaker)

The BouncyCastle certificate generator will store the generated intermediate certificate in memory. That means you won't have to worry about their validity period as they won't be stored locally, and you won't have to reuse an old intermediate certificate that is about to expire.

 

 

Regards,
Nick Iliev
Progress Telerik

[chen]

Thanks very much for reply.

I use Fiddler Classic as a transparent proxy. My users need to install and trust the Fiddler certificate to avoid error warnings when accessing websites. If I use BouncyCastle to generate new certificates, will my users need to frequently update their certificates?

[Nick Iliev]

The BouncyCastle stores the intermediate certificate only in memory, so there will be no need to update the certificates manually (they will be automatically re-created by the BC generator)