Hello,
if i start "HTTP Analyzer 7" (http://www.ieinspector.com/httpanalyzer/download.html) and then an application using your Chromium-Components, i can see every HTTPS Traffic without a warning, that the side is using another certificate (work as Man-in-the-middle). Is there a way to check this? To check the name of the certificate-person? Firefox can do: If i try to navigate to Google, Firefox give me a warning. Google Chrome doesn't do this.
Regards
Disclosure Statement: This site contains affiliate links, which means that I may receive a commission if you make a purchase using these links. As an eBay Partner, I earn from qualifying purchases.
Check SSL Zertificate
- salvadordf
- Posts: 4564
- Joined: Thu Feb 02, 2017 12:24 pm
- Location: Spain
- Contact:
Re: Check SSL Zertificate
You can read the certificate chain and make your own security checks.
The certificate is available at TChromium.VisibleNavigationEntry.SSLStatus.GetX509Certificate and the ICefX509Certificate interface allows you to get the issuer chain using GetPEMEncodedIssuerChain or GetDEREncodedIssuerChain.
For more information read the code comments here :
https://github.com/chromiumembedded/cef ... ate_capi.h
The certificate is available at TChromium.VisibleNavigationEntry.SSLStatus.GetX509Certificate and the ICefX509Certificate interface allows you to get the issuer chain using GetPEMEncodedIssuerChain or GetDEREncodedIssuerChain.
For more information read the code comments here :
https://github.com/chromiumembedded/cef ... ate_capi.h
Re: Check SSL Zertificate
Thank you, that's working perfect.