When recording HTTPS traffic from mobile devices, the first step is to download the StresStimulus root certificate. You need to install the root certificate only once on a device.

Standalone version

  1. In StresStimulus main menu, go to Edit > Settings and select the HTTPS tab.
  2. Click the Install Root Certificate... button.
  3. Clicking the button will start the Certificate Installation Service and bring up the Root Certificate Installation message box.
  4. On the mobile device, open a browser and navigate to the http://{StresStimulus_IP}:{StresStimulus_Port}/
    1. StresStimulus_IP is the IP address of the machine that has StresStimulus running
    2. StresStimulus_port is the listening port of StresStimulus, 49386, by default.
  5. This will bring up the StresStimulus echo service page.
  6. Click the link to download the root certificate to the device.
  7. Accept all the prompts to add this certificate to the trusted repository list.
  8. If you are using iOS 10.3 or later, you must also manually trust the installed certificate profile.
    1. Go to Settings > General > About > Certificate Trust Settings. 
    2. Under "Enable full trust for root certificates," turn on trust for this certificate.
  9. Click the close button in the message box to stop the Certificate Installation Service. 

    You may now record HTTPS traffic on the device. 

Fiddler add-on version

  • For iOS devices: section Decrypt HTTPS Traffic from iOS Devices in this article, or check out this blog.

  • For Android devices: section Decrypt HTTPS in this article, or check out this blog.


  • No labels