This is a migrated thread and some comments may be shown as answers.

Reverse HTTPS proxy with dynamically-generated CN's

0 Answers 48 Views
Fiddler Classic
This is a migrated thread and some comments may be shown as answers.
Peter
Top achievements
Rank 1
Peter asked on 08 Jan 2016, 02:14 AM

I'd like to intercept HTTPS traffic from a client when specifying a proxy isn't an (easy) option. Ordinarily, I'd run Fiddler as a reverse proxy and set up a listener on port 443 and specify a CN using

!listen 443 name.of.a.single.secure.website

However, my client will be talking to multiple HTTPS domain names, rather than a single one. In normal Fiddler proxy operation, handling multiple secure sites isn't an issue, as certificates are dynamically-generated at intercept-time with the proper CN.

My question is:

  • Is there an equivalent way to enable Fiddler's dynamic-generation of certs in reverse proxy mode?

It seems like there shouldn't be any technical reason why this couldn't be done, as it'd be a matter of telling the listener to grab the domain name the client is requesting and paste it into the cert that it returns when it initiates the handshake... the same as what Fiddler does in normal operation.

No answers yet. Maybe you can help?

Tags
Fiddler Classic
Asked by
Peter
Top achievements
Rank 1
Share this question
or