How to add SSL certificate to Fiddler?

[Naresh Kumar]

Hi,

I am using Fiddler 4. I want to add an SSL certificate to Fiddler.

I navigate to HTTPS tab:

Tools --> Options --> HTTPS

When I select "Decrypt HTTPS traffic", there is no option to add my SSL certificate. However, when selecting to "Decrypt HTTPS traffic" in fiddler, it still uses its own certificate.

Basically, I want to capture all the request which are right now I can't see because of the SSL certificate.

Please help me in doing it.

Thanks,
Naresh

[EricLaw]

Generally speaking, you don't add certificates to Fiddler. Fiddler automatically generates certificates for HTTPS interception. 

Can you explain what problem you're having specifically?

[Naresh Kumar]

We are not able to decrypt the traffic which is using customer SSL certificate. So, we wanted to add customer certificate to the Fiddler so that we can decrypt the traffic.

[Eric Lawrence]

Please explain more fully why you believe that the traffic must be secured with the customer's SSL certificate?

In most cases, the certificate in use does not matter at all, so long as you've configured the client to trust Fiddler's root certificate.

[Илья Резник]

Some applications uses for encryption only integrated certificates or remote server accepts packets only signed with special certificate. So this applications will not work through proxy server.

[EricLaw]

Right; this is called certificate pinning. See http://fiddler.wikidot.com/certpinning for details.