Disclosure Statement: This site contains affiliate links, which means that I may receive a commission if you make a purchase using these links. As an eBay Partner, I earn from qualifying purchases.
If you find these projects useful please consider becoming a sponsor with Patreon, GitHub or Liberapay.

Check SSL Zertificate

Post Reply
Det20
Posts: 38
Joined: Fri Mar 10, 2017 3:11 pm

Check SSL Zertificate

Post by Det20 »

Hello,

if i start "HTTP Analyzer 7" (http://www.ieinspector.com/httpanalyzer/download.html) and then an application using your Chromium-Components, i can see every HTTPS Traffic without a warning, that the side is using another certificate (work as Man-in-the-middle). Is there a way to check this? To check the name of the certificate-person? Firefox can do: If i try to navigate to Google, Firefox give me a warning. Google Chrome doesn't do this.

Regards
User avatar
salvadordf
Posts: 4564
Joined: Thu Feb 02, 2017 12:24 pm
Location: Spain
Contact:

Re: Check SSL Zertificate

Post by salvadordf »

You can read the certificate chain and make your own security checks.

The certificate is available at TChromium.VisibleNavigationEntry.SSLStatus.GetX509Certificate and the ICefX509Certificate interface allows you to get the issuer chain using GetPEMEncodedIssuerChain or GetDEREncodedIssuerChain.

For more information read the code comments here :
https://github.com/chromiumembedded/cef ... ate_capi.h
Det20
Posts: 38
Joined: Fri Mar 10, 2017 3:11 pm

Re: Check SSL Zertificate

Post by Det20 »

Thank you, that's working perfect.
Post Reply