Mozilla maintains this document as a reference guide for navigating the TLS landscape, as well as a configuration generator to assist system administrators. Changes are reviewed and merged by the Mozilla Operations Security and Enterprise Information Security teams.
Fix generator v.1.1 samsung
Indeed, I can confirm that the issue is in the certificate generated by Fiddler Classic. By default, this certificate is generated from a tool called CertEnroll (more about certificate generation here: -fiddler-certificate-generators ). However, this tool is not generating a valid certificate for the latest iOS versions. As per the documented instructions, you need to use the Bouncy Castle certificate generator which will produce valid certificates that are compatible with iOS.
Hi Nick,Sorry for taking so long to get back...I had not noticed that you, in the beginning of 2021, changed the instructions for iOS to specify that you now have to use Bouncy Castle certificate generator instead of the default one.I followed the (new) instructions, downloaded & installed the Bouncy Castle extension, reset the certificates in Fiddler, deleted the old Fiddler root certificate on the device(s) and installed the newly generated Fiddler root certificate on the device(s) - and everything now works as a charm on all three of my test devices ?It sounds like a good idea to release a new version of Fiddler Classic with a default certificate generator which produces valid certificates that are actually compatible with iOS - but I can see that you removed that line from you your original answer...?
One good choice for a state token is a string of 30 or so characters constructed using a high-quality random-number generator. Another is a hash generated by signing some of your session state variables with a key that is kept secret on your back-end.
NOTE: If using cygwin, you must install and ensure you use the Windows version of cmake. The cygwin vesion does not contain the Visual Studio generators. Here is a shell function you can put in your cygwin .bash_profile to use it easily. With this you can simply type wcmake to run the Windows version.
* Revert "x86-64, modify_ldt: Make support for 16-bit segments a runtime option" - LP: #1371601 * mmc: rtsx: add R1-no-CRC mmc command type handle - LP: #1365378 * rpc_pipe: remove the clntXX dir if creating the pipe fails - LP: #1365869 * sunrpc: add an "info" file for the dummy gssd pipe - LP: #1365869 * rpc_pipe: fix cleanup of dummy gssd directory when notification fails - LP: #1365869 * hwrng: xgene - add support for APM X-Gene SoC RNG support - LP: #1365593 * Documentation: rng: Add X-Gene SoC RNG driver documentation - LP: #1365593 * arm64: dts: add random number generator dts node to APM X-Gene platform. - LP: #1365593 * xen/balloon: cancel ballooning if adding new memory failed - LP: #1304001 * x86/xen: resume timer irqs early - LP: #1368724 * xen/manage: Always freeze/thaw processes when suspend/resuming - LP: #1368724 * scsi_transport_sas: move bsg destructor into sas_rphy_remove - LP: #1368991 * drm/i915: Enable 5.4Ghz (HBR2) link rate for Displayport 1.2-capable devices - LP: #1369633 * bnx2x: Fix link for KR with swapped polarity lane - LP: #1370716 * drm: add DRM_CAPs for cursor size - LP: #1359213 * drm/dp: Add AUX channel infrastructure - LP: #1359213 * drm/dp: Add drm_dp_dpcd_read_link_status() - LP: #1359213 * drm/dp: Add DisplayPort link helpers - LP: #1359213 * drm/dp: Allow registering AUX channels as I2C busses - LP: #1359213 * drm/dp: let drivers specify the name of the I2C-over-AUX adapter - LP: #1359213 * drm/dp: make aux retries less chatty - LP: #1359213 * Bluetooth: Enable Atheros 0cf3:311e for firmware upload - LP: #1371477 * bnx2x: fix crash during TSO tunneling - LP: #1371601 * inetpeer: get rid of ip_id_count - LP: #1371601 * ip: make IP identifiers less predictable - LP: #1371601 * tcp: Fix integer-overflows in TCP veno - LP: #1371601 * tcp: Fix integer-overflow in TCP vegas - LP: #1371601 * macvlan: Initialize vlan_features to turn on offload support. - LP: #1371601 * net: Correctly set segment mac_len in skb_segment(). - LP: #1371601 * iovec: make sure the caller actually wants anything in memcpy_fromiovecend - LP: #1371601 * batman-adv: Fix out-of-order fragmentation support - LP: #1371601 * sctp: fix possible seqlock seadlock in sctp_packet_transmit() - LP: #1371601 * sparc64: Fix argument sign extension for compat_sys_futex(). - LP: #1371601 ... 2ff7e9595c
Comments