Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How do you remove the root CA certificate that fiddler installs

Fiddler helpfully offers to add a unique root CA certificate to intercept HTTPS traffic.

Once this certificate has been added, how do you go about removing it?

enter image description here

like image 786
muzzamo Avatar asked May 30 '13 04:05

muzzamo


People also ask

Is it safe to install Fiddler root certificate?

No it's not safe, and yes you should remove it. The entire point of it is to break the security of SSL for debugging convenience. It even has "DO_NOT_TRUST" in its name, for a good reason.


2 Answers

Either of two ways:

1) Disable HTTPS decryption and click the button titled "Remove Interception Certificates"

fiddler options dialog

2) Open CertMgr.msc, open the Personal and Trusted Stores, and use the Delete key on the root.

like image 96
EricLaw Avatar answered Sep 22 '22 17:09

EricLaw


Since Fiddler 4.6.1.5 the GUI is a bit different.

Fiddler Options

Go to Tools -> Fiddler Options -> HTTPS. Then click the "Actions" button and then "Reset All Certificates"

It will popup a message that it could take a while but it's really quick. Approve all popups and there you go.

Pay attention not to re-approve the certificate again (when I did it the message for approving the certificates popped up when I finished to approve all the popups.)

like image 40
Eyal Abir Avatar answered Sep 19 '22 17:09

Eyal Abir