How to enable Fiddler to crawl HTTPS requests

The default installation of Fiddler, when crawling HTTP page, HTTPS page is not crawled, we need to set up fiddle to be able to. So how does fiddler capture HTTPS sessions? Follow the steps below to operate and set.

By default, Fiddler does not capture HTTPS sessions, requires you to set, open Fiddler, and then tap Tools > Fiddler options in the menu bar to open the Fiddler Options dialog box.

650) this.width=650; "Width=" 553 "height=" 398 "src="/e/u261/themes/default/images/spacer.gif "style=" Background:url ("/e/u261/lang/zh-cn/images/localimage.png") no-repeat center;border:1px solid #ddd; "alt=" Spacer.gif "/>

In the dialog box that opens, switch to the HTTPS tab.

650) this.width=650; "Width=" 553 "height=" 370 "src="/e/u261/themes/default/images/spacer.gif "style=" Background:url ("/e/u261/lang/zh-cn/images/localimage.png") no-repeat center;border:1px solid #ddd; "alt=" Spacer.gif "/>

In the HTTPS tab that opens, tick the checkboxes in front of Capture HTTPS connects, Decrypt HTTPS traffic, and Ignore servercertificate errors.

650) this.width=650; "width=" 558 "height=" 373 "src="/e/u261/themes/default/images/spacer.gif "style=" Background:url ("/e/u261/lang/zh-cn/images/localimage.png") no-repeat center;border:1px solid #ddd; "alt=" Spacer.gif "/>

Then click Export CA certificate to desktop.

650) this.width=650; "Width=" 755 "height=" 373 "src="/e/u261/themes/default/images/spacer.gif "style=" Background:url ("/e/u261/lang/zh-cn/images/localimage.png") no-repeat center;border:1px solid #ddd; "alt=" Spacer.gif "/>

The browser will check the digital certificate and discover that the session has been bugged. To fool the browser, fiddler encrypts HTTPS traffic by using another digital certificate. After fiddler is configured to decrypt HTTPS traffic, a CA certificate named Do_not_trust_fiddlerroot is automatically generated and used to issue a TLS certificate for each domain name. If the Do_not_trust_fiddlerroot certificate is included in the list of trusted CAs for the browser or other software, the browser or other software will consider the HTTPS session to be trustworthy. We will then install this certificate.

650) this.width=650; "width=" 419 "height=" 486 "src="/e/u261/themes/default/images/spacer.gif "style=" Background:url ("/e/u261/lang/zh-cn/images/localimage.png") no-repeat center;border:1px solid #ddd; "alt=" Spacer.gif "/>

Then click "OK".

650) this.width=650; "width=" 558 "height=" 373 "src="/e/u261/themes/default/images/spacer.gif "style=" Background:url ("/e/u261/lang/zh-cn/images/localimage.png") no-repeat center;border:1px solid #ddd; "alt=" Spacer.gif "/>

Next, install the certificate into a different browser, and in Chrome as an example, open the Settings option.

650) this.width=650; "Width=" 669 "height=" 575 "src="/e/u261/themes/default/images/spacer.gif "style=" Background:url ("/e/u261/lang/zh-cn/images/localimage.png") no-repeat center;border:1px solid #ddd; "alt=" Spacer.gif "/>

Click "Show advanced Settings" to locate the HTTPS/SLL item and tap "Manage Certificate".

650) this.width=650; "width=" 663 "height=" 707 "src="/e/u261/themes/default/images/spacer.gif "style=" Background:url ("/e/u261/lang/zh-cn/images/localimage.png") no-repeat center;border:1px solid #ddd; "alt=" Spacer.gif "/>

Import the desktop's AC certificate.

650) this.width=650; "Width=" 509 "height=" 433 "src="/e/u261/themes/default/images/spacer.gif "style=" Background:url ("/e/u261/lang/zh-cn/images/localimage.png") no-repeat center;border:1px solid #ddd; "alt=" Spacer.gif "/>

Now the Fiddler is listening for HTTPS requests and responses.

To learn how Fiddler communicates with browsers and HTTP or HTTPS or data transfer, you can find the following URLs:

http://www.zhihu.com/question/24484809

How to enable Fiddler to crawl HTTPS requests