4

Can I intercept https traffic that uses certificate pinning using fiddler if I have the private key of the cert?

I am trying to intercept traffic between our mobile apps and API, and the mobile apps are using certificate pinning.

If I have the certificate and the private key from the web server, can I install it locally and use it to decrypt the traffic?

Seems like I should be able to.

3

Yes, generally speaking.

The comments have linked you correctly to the mitm proxy documentation for that feature already.

If that however is a feature of fiddler I do not know. If it's not in the documentation, go for MITM proxy instead:)

This, by the way, is independent of you using certificate pinning; this would work fine without a pinned certificate as well.

Whenever you have the private key, you can MITM.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.