4

I enabled "Decrypt HTTPS traffic" and "Ignore server certificate errors" in Fiddler but the traffic of one website is not being showed.

This is the error that Fiddler is returning:

[Fiddler] The connection to '...' failed. System.Security.SecurityException Failed to negotiate HTTPS connection with server.fiddler.network.https> HTTPS handshake to ... failed. System.IO.IOException Received an unexpected EOF or 0 bytes from the transport stream.

I remember that I could ignore this error in Fiddler script, but I really don't remember.

Does anyone know what's going on?

Thanks! =)

3 Answers 3

5

What is the site's URL?

It is probably caused by either of these two issues: http://blogs.msdn.com/b/ieinternals/archive/2009/12/08/aes-is-not-a-valid-cipher-for-sslv3.aspx or http://blogs.msdn.com/b/fiddler/archive/2012/03/29/https-request-hangs-.net-application-connection-on-tls-server-name-indicator-warning.aspx

The old workaround is to configure Fiddler to only use SSL3 when talking to the host in question. The newer workaround is to either use Fiddler4 with the latest .NET4.5.2 framework, or if you're using Fiddler 2.5.1, see the "SNI Hack" section of http://www.telerik.com/blogs/what-s-new-in-fiddler-4-5-1

In your OnBeforeRequest event handler, add the following code to fix the issue for certain sites:

if (oSession.HTTPMethodIs("CONNECT") && oSession.HostnameIs("BuggySite.com")) 
{ 
  oSession["https-DropSNIAlerts"] = "yup"; 
  FiddlerApplication.Log.LogString("Legacy compat applied for request to BuggySite.com"); 
}
7
  • Thank you.changing the enabled protocols to only ssl3 solved the issue for me
    – iRamesh
    Commented Jul 8, 2015 at 16:07
  • 1
    Generally speaking, you want to avoid doing that as it will break for other sites. See the updated answer.
    – EricLaw
    Commented Jul 8, 2015 at 17:16
  • 17:48:52:7150 Legacy compat applied for request to BuggySite.com 17:48:52:8420 fiddler.network.https> HTTPS handshake to public.msrtcors.com (for #808) failed. System.IO.IOException Received an unexpected EOF or 0 bytes from the transport stream. I get this error even after putting the hack in the custom rules. The Log show that the hack gets executed. Yet it does not solve my problem.
    – Yash
    Commented Sep 26, 2016 at 12:19
  • @Yash: What's the actual URL? Debugging telepathically doesn't work.
    – EricLaw
    Commented Sep 26, 2016 at 20:48
  • This is what I added in the custom rules: if (oSession.HTTPMethodIs("CONNECT") && oSession.HostnameIs("public.msrtcors.com")) { oSession["https-DropSNIAlerts"] = "yup"; FiddlerApplication.Log.LogString("Legacy compat applied for request to BuggySite.com"); }
    – Yash
    Commented Sep 27, 2016 at 4:49
5

A bit late for the poster unfortunately but I just needed to add tls1.2:

  1. Tools
  2. Options
  3. HTTPS
  4. Protocols
  5. Add tls1.2 to the end of the list and click ok
1
  • You can also temporarily enable Capture HTTPS to set this and then disable it once again if you're not interested in Capturing HTTPS.
    – Aage
    Commented Aug 22, 2022 at 11:08
0

I was seeing the following exception:

System.Security.SecurityException Failed to negotiate HTTPS connection with server.fiddler.network.https. HTTPS handshake to api.etadirect.com (for #9) failed. System.IO.IOException Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. An existing connection was forcibly closed by the remote host

I was able to fix it by enabling the TLS1.2 protocol which is not enabled by default for outgoing connections Tools -> Options -> HTTPS -> click on protocols list enter image description here

1
  • Hi All, after adding the tls1.2 to the protocols there is no error on handshake but still no traffic is appearing what is creating this situation?
    – Y.D
    Commented Sep 17, 2022 at 11:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.