Take the 2-minute tour ×
Android Enthusiasts Stack Exchange is a question and answer site for enthusiasts and power users of the Android operating system. It's 100% free, no registration required.

I am actually trying to debug all the traffic going in and out on my phone. I am using Fiddler on my PC, and ProxyDroid on my phone to do this. HTTP traffic works fine. I am able to decrypt it completely. However, with HTTPS traffic, all I get is "Tunnel to : xxx.xxx.xx.xxx:443 ". Any idea how do I decrypt the traffic going through the HTTPS route?

I installed the FiddlerRoot.cer on my phone through the default browser. Still no luck on decrypting the HTTPS traffic.

P.S : I am talking about traffic from apps, and not through the browser. My Phone is running ICS and is rooted.

share|improve this question
3  
Humm... I always thought the "S" in "HTTPS" stands for "secure". So the idea behind that is that you should not be able to easily decrypt it -- it is encrypted for good reason. –  Izzy Feb 11 '13 at 14:23
1  
HTTPS is for protecting against a man in the middle attack... which is what it sounds like you're trying to do. See: en.wikipedia.org/wiki/Man-in-the-middle_attack and stackoverflow.com/questions/2888884/… and stackoverflow.com/questions/3075489/… etc –  Bryan Denny Feb 11 '13 at 15:00
    
Yes, I am exactly trying to do that. Using Fiddler, we can decrypt the HTTPS traffic. Read here --> fiddler2.com/fiddler/help/httpsdecryption.asp . Its easy to do this for browsers on the pc or phones etc. But I am trying to accomplish this for an App on my phone. –  Ubaid Feb 12 '13 at 7:43

1 Answer 1

I ran into the same issue. First - make sure you have it all set up correctly on Fiddler on your PC:

  1. Goto Tools-->Fiddler Options-->HTTPS and make sure the first 3 check boxes are checked.
  2. Click "Export Root Certificate to Desktop" and copy the cert file from your desktop to your device/SD card
  3. In your device, goto setting-> security -> Credential Storage-> Install from SD Card , and install your certificate.

That's it. worked for me :)

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.