Fiddler - Decrypt Android HttpsUrlConnection SSL traffic

Question

I\'ve spent countless hours trying to decrypt Android SSL traffic via Fiddler for HttpsUrlConnection with very little success. How do I reliably configure Fiddler to decryp

Answer 1

My research shown that there is a bug in HttpsUrlConnection pipeling implementation.

To solve a problem you need to perform following steps in Fiddler:

1. In Fiddler click "Rules->Customize Rules";

2. In opened script and find function OnBeforeResponse

3. In the function body add following code:

   if (oSession.oRequest["User-Agent"].indexOf("Dalvik") > -1 && oSession.HTTPMethodIs("CONNECT")) {  
      oSession.oResponse.headers["Connection"] = "Keep-Alive";     
   } 
   

4.Save file and restart Fiddler