Fiddler: Respond to Requests Requiring a Client Certificate

certificate x509certificate fiddler fiddlercore
Mickey Sly picture Mickey Sly · Jul 3, 2013 · Viewed 10.8k times · Source

I'm trying to scrape a website that first asks for a certificate. After you are authenticated it then will ask you to provide a username and password. Anyway I'm trying to use fiddler to see what i need to replicate and when i turn on it to "Capture traffic" and then I go to internet explorer and try to access the site it says " Internet Explorer cannot display the webpage " then when i turn off fiddler and try it again it brings me to the login page.

I've tried this link and i tried everything (Turning it into a .cer file and dragging into the folder also tried copy and pasting the code into the rule file to accept the certificate) and neither way worked. Does anyone have any other ideas.

Am I suppose to replace the fiddler root certificate somehow? or is there any solution that someone can suggest?

Answer

Mickey Sly picture Mickey Sly · Jul 3, 2013

I figured out this problem. Just incase this trips someone else up. The oSession bit of code needed to be the first line after the OnBeforeRequest line. I don't remember where it was before but it didn't work. Example:

 static function  OnBeforeRequest(oSession: Session) {
   oSession["https-Client-Certificate"]= "C:\\Yourcerfilelocation.cer"; 
 //I omitted the standard code

}

Edit: OnBeforeRequest is a better method to place it instead of OnPeekAtRequestHeaders.

Related questions

How to create a self-signed certificate with OpenSSL

I'm adding HTTPS support to an embedded Linux device. I have tried to generate a self-signed certificate with these steps: openssl req -new > cert.csr openssl rsa -in privkey.pem -out key.pem openssl x509 -in cert.csr -out …

Read More
Export P7b file with all the certificate chain into CER file

I have p7b file provided by Thwate.When I am trying to export the certificate in the cer file using the below command, the certificate chain is not included. Please suggest how to do the same. This CER is …

Read More
How does an SSL certificate chain bundle work?

I've created a chain hierarchy like this. root-ca ==> signing-ca ==> subordinate-ca ==> server It is mentioned to create chain bundle, the lowest should go first. $ cat server.crt subordinate-ca.crt signing-ca.crt > server.pem But verification fails. $ openssl …

Read More