Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Fiddler - Capture and decrypt HTTPS traffic from iPad app

I'm trying to monitor the HTTPS requests/responses for my iPad app using Fiddler. I have a Windows 7 PC running Fiddler and have configured the HTTP proxy on my iPad to point to the PC using port 8888. This works fine and the CONNECT tunnel messages and 'ClientHello' handshakes can be seen in the capture log. However as soon as I enable the 'Decrypt HTTPS traffic' option in Fiddler, the app is blocked from connecting to the server. I've tried installing the Fiddler root certificate on the PC, and I also installed the certificate on my iPad by exporting the certificate to a URL and pointing Safari to the URL on my iPad which then installed it. This hasn't made a difference. Do I need to do something with the SSL certificate installed at the server running my web service?

like image 474
Jonathan Wareham Avatar asked Sep 24 '12 08:09

Jonathan Wareham


2 Answers

Download the Fiddler Add-on for iOS/Android then visit http://[proxyip]:[port]/ using your phone browser. You can generate/download your working certificate from there.

And

Turn on your fiddler certificate at Your iPhone Setting -> General -> About -> Certificate Trush Settings

like image 85
Em Seven Avatar answered Oct 24 '22 05:10

Em Seven


You may not have completely installed the Fiddler certificate.

Email the fiddler certificate to your iPad. Open the email and then open the certificate. iOS will prompt you to trust the certificate, and then install it.

If it is installed correctly, you will have a new iOS setting under Settings->General->Profile called DO_NOT_TRUST_Fiddler. That setting is your installed certificate.

Once the certificate is installed - Fiddler will be able to show you your HTTPS traffic.

like image 32
Josh Avatar answered Oct 24 '22 06:10

Josh