views:

21

answers:

1

Is it possible to use a custom root CA for FiddlerCore to intercept HTTPS traffic.

What I need is assigning a certificate to be used to to sign all host certificates.

Another solution can be supplying certificate information to FiddlerCore before creating root certificate.

A: 

FiddlerCore does not currently offer the ability to customize the information contained in its self-signed root. It will generate all end-entity certificates chained to the root named DO_NOT_TRUST_FiddlerRoot.

Can you elaborate on why you seek this capability?

EricLaw -MSFT-
We're using FiddlerCore to provide proxy support on a commercial tool. When user starts the proxy feature, FiddlerCore tries to install Fiddler generated root certificate and FiddlerRoot text is shown. The aim is customizing this text.
dereli
For actually installing the root, you can do so yourself without calling the FiddlerCore method that does that. However, note that the text of the prompt is from Windows, not Fiddler. X509Store certStore = new X509Store(StoreName.Root, StoreLocation.CurrentUser);certStore.Open(OpenFlags.ReadWrite);try { certStore.Add(oRootCert); // May fail due to user declining Windows' security prompt}finally { certStore.Close(); }There are other ways to install the root, but they require that your application is running as admin.
EricLaw -MSFT-
It is OK to install a root certificate but the problem is that FiddlerCore won't use that certificate to sign automatically generated per-site certificates.
dereli
Yes, you need to install the root certificate that FiddlerCore itself uses. Installing some other certificate wouldn't be useful.
EricLaw -MSFT-
Do you have a plan to let customize text or use custom root certificate?
dereli
The text in question is provided by Windows and cannot be changed. To install the root without the text, your application needs to be running as an administrator.
EricLaw -MSFT-