CODEWITHSUNDEEP
sslhttpscertificatefiddler
steff chi
steff chi

Reputation: 39

Fiddler fail to access HTTPS page

Page creating required cookies: http://ticket.urbtix.hk/internet/en_US

Problematic https => https://ticket.urbtix.hk/internet/login/transaction

When I try to access the http page via Fiddler using Firefox, fiddler can successfully capture the http packet.

But when I access the HTTPS page in the server, Firefox will prompt "The connection was reset".

I have setup Firefox to trust the cert from Fiddler and I can successfully connect to HTTPS page in other server, like google.com.

It looks to me the server ticket.urbtix.hk only trust specific client certificate. I try to extract the cert from Firefox and attach to fiddler, but it does not work for me.

Upvotes: 1

Views: 2216

Answers (3)

Max Carroll
Max Carroll

Reputation: 4849

I reset all the fiddler certificates and it seemed to work

Fiddler 4.6.1.5+

  1. Click Tools > Fiddler Options
  2. Click the HTTPS tab
  3. Ensure that the text says Certificates generated by CertEnroll engine
  4. Click Actions > Reset Certificates. This may take a minute.
  5. Accept all prompts

enter image description here (for me there was approximately 6 prompts asking me for permission to remove and add stuff)

https://textslashplain.com/2015/10/30/reset-fiddlers-https-certificates/

Upvotes: 1

EricLaw
EricLaw

Reputation: 57115

I've confirmed that this is the server bug whereby the server foolishly sends a non-fatal SNI warning.

The workaround is simple. In Fiddler, click Rules > Customize Rules.

Scroll to the OnBeforeRequest method. Add the following code:

    if (oSession.host.Contains("urbtix.hk"))
    {
        oSession["X-OverrideSSLProtocols"] = "ssl3";   
    }

Upvotes: 1

PxP
PxP

Reputation: 31

Possibly try with other browsers to eliminate FF related bug. Also try changing following.

  1. Reuse client connection
  2. Reuse server connection

Its working perfect at my end and can't replicate issue.

Upvotes: 0

Related Questions