Unable to launch google drive file stream app when fiddler capture is enabled.

[Avinash]

1.Downloaded, installed google drive file stream desktop application.

2.Tried to launch application and click on sign in button.

3.Then login page got opened over browser there asked for login credentials to authenticate.

4.Provided required credentials. then asked for sign in clicked on signin button

5.Login got succeeded but Failed to launch google drive file stream app when fiddler is opened to capture the traffic. 

6. Downloaded logs drive_fs enabling verbose mode in app settings.

7.Found curl 60 error as shown in attachment

8.When we see all logs observed ssl verification is done with C:\Program Files\Google\Drive File Stream\51.0.9.0\config\roots.pem

Is there any process or procedure to update certificate in above provided location to access app through fiddler?

[Nick Iliev]

Hello Avinash,

 

While using the latest version of Google Drive (51.0.14.0) I am unable to reproduce the issue. Still, I've signed in before using Fiddler, and then the Google Drive application was able to run as expected.

You could use the instructions provided by Google here to set up a custom configuration for your Google Drive. As described in the article, you have options to set an alternative path for a file containing your certificates (converted to PEM) or to disable the SSL validation altogether, which would allow a MITM attack to happen (and FIddler to work).

 

 

Regards,
Nick Iliev
Progress Telerik

[Avinash]

Thanks Nick,

I got your answer.

Here through fiddler we can able to login once we disable the SSL validation in registry.

We want to login to drive after launching fiddler. Can you help me in adding fiddler root certificate to existing roots.pem file to validate the cert?

[Nick Iliev]

You should first export the Fiddler certificate through the application settings - it will. output a CRT file called FiddlerRootCertificate.crt on your Desktop folder.

Then convert the CRT file to PEM and place it in a folder which you will later use for setting up the GoogleDrive. Use the openssl tool to convert the file

openssl x509 -inform der -in FiddlerRootCertificate.crt -outform PEM -out FiddlerRootCertificate.pem

After that, follow the OS-specific instructions as described in the Google article to set the path to that file.  For example, on Windows, you should open the registry editor and set TrustedRootCertsFile key with a value containing the path to the folder with the newly generated PEM.

As a disclosure, I have not verified the above steps on my side, just followed the instructions given in the Google documentation files. You should also contact your OS administrator if you don't have access to some of the tooling or need additional company-specific access and instructions.