Skip to content

Support user context "acceptInsecureCertificate: false" with capability "acceptInsecureCertificate: true" #3398

@sadym-chromium

Description

@sadym-chromium

Currently, Security.setIgnoreCertificateErrors CDP method is called for browser context based on the capabilities. It is required for service workers to respect the capability.

When a new user context is created with a custom acceptInsecureCerts param, the Security.setIgnoreCertificateErrors is called for each page target, which leaves service workers aside.

The logic in merging the Security.setIgnoreCertificateErrors behavior between browser and page targets is "OR", meaning if it is set with "ignore: true" for the browser or page target, the ssl errors will be ignored.

This makes it possible to implement only 2 of the 3 following options:

  1. Respect acceptInsecureCerts capability in service workers.
  2. Respect acceptInsecureCerts: true capability in service workers.
  3. Respect acceptInsecureCerts: false user context's param.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions