https 通过Fiddler代理访问 (二)

最新推荐文章于 2025-06-12 13:52:47 发布

原创最新推荐文章于 2025-06-12 13:52:47 发布 · 3.5k 阅读

1 ·

CC 4.0 BY-SA版权

文章标签：

#https #代理

https 专栏收录该内容

9 篇文章

订阅专栏

本文是关于如何通过Fiddler设置代理访问HTTPS的续篇。内容包括安装FiddlerRoot.cer证书到keystore，并将其导入到咖啡-100.keystore中，设定别名为Fiddler。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

继续解决上一篇的问题

https 通过Fiddler代理访问 (一)

这个时候桌面会生成一个FiddlerRoot.cer

当前coffee.keystore秘钥库中存在一个证书

C:\Users\coffee\Desktop>kkeytool -list -v -keystore coffee-100.keystore
输入密钥库口令:

密钥库类型: JKS
密钥库提供方: SUN

您的密钥库包含 1 个条目

别名: tomcat
创建日期: 2017-1-1
条目类型: PrivateKeyEntry
证书链长度: 1
证书[1]:
所有者: CN="-ext SAN=ip:192.168.1.100", OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=Unknown
发布者: CN="-ext SAN=ip:192.168.1.100", OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=Unknown
序列号: 37f2c69b
有效期开始日期: Sun Jan 01 20:08:53 CST 2017, 截止日期: Sat Apr 01 20:08:53 CST 2017
证书指纹:
         MD5: AA:7E:41:B6:7D:DB:2E:6A:CB:AF:E0:F1:88:3B:7F:35
         SHA1: 33:2B:35:6E:D0:A1:E8:B7:7E:A2:B3:F2:AD:0D:A0:AB:D2:31:60:36
         SHA256: 91:C5:AB:AB:F1:FC:A3:DE:B3:77:74:03:10:54:9C:AB:9F:F1:A9:E7:99:98:A4:7E:95:05:A4:DF:6C:95:D2:4F
         签名算法名称: SHA256withRSA
         版本: 3

扩展:

#1: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
  IPAddress: 192.168.1.100
]

#2: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 71 0B F4 24 D0 7C A3 62   56 2D CA 47 C8 08 F3 71  q..$...bV-.G...q
0010: 7A 9D EE 87                                        z...
]
]



*******************************************
*******************************************

可以看出当前只有一个证书

接下来要办的事儿就是把FiddlerRoot.cer导入到秘钥库中 <br>

把证书导入到秘钥库coffee-100.keystore中, 别名定义为Fiddler

C:\Users\coffee\Desktop>keytool -import -file FiddlerRoot.cer -alias Fiddler -keystore coffee-100.keystore
输入密钥库口令:
所有者: CN=DO_NOT_TRUST_FiddlerRoot, O=DO_NOT_TRUST, OU=Created by http://www.fiddler2.com
发布者: CN=DO_NOT_TRUST_FiddlerRoot, O=DO_NOT_TRUST, OU=Created by http://www.fiddler2.com
序列号: 5160b0fe2a1b7da8454855c1c82a0bb2
有效期开始日期: Fri Nov 20 16:25:44 CST 2015, 截止日期: Fri Nov 19 16:25:44 CST 2021
证书指纹:
         MD5: F5:48:6E:6B:2D:E5:22:C1:30:FE:EC:9D:12:60:D3:C1
         SHA1: 47:92:66:8E:D7:67:FA:30:88:77:31:D6:A2:C6:AD:9E:5E:1C:B9:83
         SHA256: BB:15:BF:CB:C2:B1:6D:47:B1:46:75:49:B9:52:14:FE:4D:0E:0C:6F:EC:A4:EB:A0:C1:7E:09:2C:85:D3:FD:80
         签名算法名称: SHA256withRSA
         版本: 3

扩展:

#1: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen:0
]

#2: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
  serverAuth
]

#3: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  Key_CertSign
  Crl_Sign
]

#4: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 5B CA 9D 06 12 F3 37 D9   BA 1B 01 26 A3 18 18 7E  [.....7....&....
0010: 30 BA EE 24                                        0..$
]
]

是否信任此证书? [否]:  y
证书已添加到密钥库中

然后在看一下秘钥库中的证书信息

C:\Users\coffee\Desktop>keytool -list -v -keystore coffee-100.keystore
输入密钥库口令:

密钥库类型: JKS
密钥库提供方: SUN

您的密钥库包含 2 个条目

别名: tomcat
创建日期: 2017-1-1
条目类型: PrivateKeyEntry
证书链长度: 1
证书[1]:
所有者: CN="-ext SAN=ip:192.168.1.100", OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=Unknown
发布者: CN="-ext SAN=ip:192.168.1.100", OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=Unknown
序列号: 37f2c69b
有效期开始日期: Sun Jan 01 20:08:53 CST 2017, 截止日期: Sat Apr 01 20:08:53 CST 2017
证书指纹:
         MD5: AA:7E:41:B6:7D:DB:2E:6A:CB:AF:E0:F1:88:3B:7F:35
         SHA1: 33:2B:35:6E:D0:A1:E8:B7:7E:A2:B3:F2:AD:0D:A0:AB:D2:31:60:36
         SHA256: 91:C5:AB:AB:F1:FC:A3:DE:B3:77:74:03:10:54:9C:AB:9F:F1:A9:E7:99:98:A4:7E:95:05:A4:DF:6C:95:D2:4F
         签名算法名称: SHA256withRSA
         版本: 3

扩展:

#1: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
  IPAddress: 192.168.1.100
]

#2: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 71 0B F4 24 D0 7C A3 62   56 2D CA 47 C8 08 F3 71  q..$...bV-.G...q
0010: 7A 9D EE 87                                        z...
]
]



*******************************************
*******************************************


别名: fiddler
创建日期: 2017-1-4
条目类型: trustedCertEntry

所有者: CN=DO_NOT_TRUST_FiddlerRoot, O=DO_NOT_TRUST, OU=Created by http://www.fiddler2.com
发布者: CN=DO_NOT_TRUST_FiddlerRoot, O=DO_NOT_TRUST, OU=Created by http://www.fiddler2.com
序列号: 5160b0fe2a1b7da8454855c1c82a0bb2
有效期开始日期: Fri Nov 20 16:25:44 CST 2015, 截止日期: Fri Nov 19 16:25:44 CST 2021
证书指纹:
         MD5: F5:48:6E:6B:2D:E5:22:C1:30:FE:EC:9D:12:60:D3:C1
         SHA1: 47:92:66:8E:D7:67:FA:30:88:77:31:D6:A2:C6:AD:9E:5E:1C:B9:83
         SHA256: BB:15:BF:CB:C2:B1:6D:47:B1:46:75:49:B9:52:14:FE:4D:0E:0C:6F:EC:A4:EB:A0:C1:7E:09:2C:85:D3:FD:80
         签名算法名称: SHA256withRSA
         版本: 3

扩展:

#1: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen:0
]

#2: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
  serverAuth
]

#3: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  Key_CertSign
  Crl_Sign
]

#4: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 5B CA 9D 06 12 F3 37 D9   BA 1B 01 26 A3 18 18 7E  [.....7....&....
0010: 30 BA EE 24                                        0..$
]
]



*******************************************
*******************************************

这个时候重新执行程序, 运行通过。