Page 1 of 1

Check SSL Zertificate

Posted: Fri Feb 16, 2018 10:08 pm
by Det20
Hello,

if i start "HTTP Analyzer 7" (http://www.ieinspector.com/httpanalyzer/download.html) and then an application using your Chromium-Components, i can see every HTTPS Traffic without a warning, that the side is using another certificate (work as Man-in-the-middle). Is there a way to check this? To check the name of the certificate-person? Firefox can do: If i try to navigate to Google, Firefox give me a warning. Google Chrome doesn't do this.

Regards

Re: Check SSL Zertificate

Posted: Sat Feb 17, 2018 8:04 am
by salvadordf
You can read the certificate chain and make your own security checks.

The certificate is available at TChromium.VisibleNavigationEntry.SSLStatus.GetX509Certificate and the ICefX509Certificate interface allows you to get the issuer chain using GetPEMEncodedIssuerChain or GetDEREncodedIssuerChain.

For more information read the code comments here :
https://github.com/chromiumembedded/cef ... ate_capi.h

Re: Check SSL Zertificate

Posted: Sat Feb 17, 2018 12:14 pm
by Det20
Thank you, that's working perfect.