[🚀 Feature]: Accept insecure certs in Selenium Manager

[pbaumard]

Feature and motivation

It should be possible to get in Selenium Manager Configuration either:

• a way to provide custom certificates, e.g. in PKCS 12 format
• or a way to accept insecure certificates, with the same behavior as the acceptInsecureCerts Browser Option.

Otherwise we cannot use Selenium Manager on our servers using self-signed certificates and get:

[INFO] org.openqa.selenium.remote.NoSuchDriverException: 
[INFO] Unable to obtain: chromedriver, error Command failed with code: 65, executed: [--browser, chrome, --language-binding, java, --output, json]
[INFO] error sending request for url (https://storage.googleapis.com/chrome-for-testing-public/133.0.6943.141/linux64/chrome-linux64.zip)
[INFO] Build info: version: '4.29.0', revision: '5fc1ec94cb'
[INFO] System info: os.name: 'Linux', os.arch: 'amd64', os.version: '4.18.0-372.32.1.el8_6.x86_64', java.version: '11.0.24'
[INFO] Driver info: driver.version: ChromeDriver
[INFO] 	at org.openqa.selenium.remote.service.DriverFinder.getBinaryPaths(DriverFinder.java:121)
[INFO] 	at org.openqa.selenium.remote.service.DriverFinder.getDriverPath(DriverFinder.java:55)
[INFO] 	at org.openqa.selenium.chrome.ChromeDriver.generateExecutor(ChromeDriver.java:99)
[INFO] 	at org.openqa.selenium.chrome.ChromeDriver.<init>(ChromeDriver.java:88)
...
[INFO] Caused by: org.openqa.selenium.WebDriverException: Command failed with code: 65, executed: [--browser, chrome, --language-binding, java, --output, json]

Usage example

Usage could be:

CLI argument	Configuration file	Env variable	Description
--accept-insecure-certs	accept-insecure-certs= true	SE_ACCEPT_INSECURE_CERTS=true	Trust invalid certificates for downloads
--cacerts	cacerts= CACERTS_PATH	SE_CACERTS=CACERTS_PATH	Custom certificates in PKCS 12 format

[github-actions]

@pbaumard, thank you for creating this issue. We will troubleshoot it as soon as we can.

---

Info for maintainers

Triage this issue by using labels.

If information is missing, add a helpful comment and then I-issue-template label.

If the issue is a question, add the I-question label.

If the issue is valid but there is no time to troubleshoot it, consider adding the help wanted label.

If the issue requires changes or fixes from an external project (e.g., ChromeDriver, GeckoDriver, MSEdgeDriver, W3C), add the applicable G-* label, and it will provide the correct link and auto-close the issue.

After troubleshooting the issue, please add the R-awaiting answer label.

Thank you!

[diemol]

Why do you say the error is related to an insecure certificate?

[pbaumard]

Why do you say the error is related to an insecure certificate?

"tls handshake eof" is shown when using debug option:

[INFO] Unable to obtain: chromedriver, error Command failed with code: 65, executed: [--browser, chrome, --language-binding, java, --output, json, --debug]
[INFO] error sending request for url (https://storage.googleapis.com/chrome-for-testing-public/133.0.6943.141/linux64/chrome-linux64.zip)
[INFO] 
[INFO] Caused by:
[INFO]     0: client error (Connect)
[INFO]     1: tls handshake eof

[diemol]

@bonigarcia do you know if this is the case?

[bonigarcia]

To my knowledge, the certificate used by storage.googleapis.com is not self-signed.

@pbaumard Is this issue still happening on your side? Could some proxy be causing this issue?

[pbaumard]

To my knowledge, the certificate used by storage.googleapis.com is not self-signed.

The self-signed certificate is used in our internal infrastructure, not by storage.googleapis.com.

Is this issue still happening on your side? Could some proxy be causing this issue?

The issue was fixed on our side by using the SE_PROXY environment variable.

So this ticket is no more required for our use case, but could probably be useful for other Selenium Manager users.

[diemol]

Thank you for letting us know.

[github-actions]

This issue has been automatically locked since there has not been any recent activity since it was closed. Please open a new issue for related bugs.