Reputation: 123
I'm using Webbrowser control to login to HTTPS site with "untrusted certificate". but I get popup such standart window "Security Alert" about untrusted certificate:
I have to find this window by title and send it Alt+Y to press Yes:
int iHandle = NativeWin32.FindWindow(null, "Security Alert");
NativeWin32.SetForegroundWindow(iHandle);
System.Windows.Forms.SendKeys.Send("Y%");
but user can see a flickering of this window.
How can I ignore this alert?
Or disable this "untrusted certificate" check in Webbrowser control?
Upvotes: 9
Views: 47781
Reputation: 516
Here,we go with the solution: I run it on the Browser_Navigated event as the underlying activeX component is null until then.
private void Browser_Navigating_1(object sender, NavigatingCancelEventArgs e)
{
HideScriptErrors(Browser,true);
}
public void HideScriptErrors(WebBrowser wb, bool Hide)
{
FieldInfo fiComWebBrowser = typeof(WebBrowser).GetField("_axIWebBrowser2", BindingFlags.Instance | BindingFlags.NonPublic);
if (fiComWebBrowser == null) return;
object objComWebBrowser = fiComWebBrowser.GetValue(wb);
if (objComWebBrowser == null) return;
objComWebBrowser.GetType().InvokeMember(
"Silent", BindingFlags.SetProperty, null, objComWebBrowser, new object[] { Hide });
}
Upvotes: 1
Reputation: 230
When I set the WebBrowser.ScriptErrorsSuppressed property to false, I do not get these popups anymore
Upvotes: 0
Reputation: 13537
If the certificate isn't from a trusted certifying authority (the first point in the prompt) then you could install the certificate under the Trusted Root Certification Authorities on the PCs in question.
You can do this under View Certificate.
In some ways this could be a simpler solution as it doesn't require any code changes that accept any and all certificates. It does however require the certificate to be installed wherever the application is used.
Upvotes: 1
Reputation: 17610
This should do it:
public static bool ValidateServerCertificate(object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors sslPolicyErrors)
{
return true;
}
ServicePointManager.ServerCertificateValidationCallback = new RemoteCertificateValidationCallback(ValidateServerCertificate);
Obviously, blindingly allowing certificates is a security risk. Be careful.
Upvotes: 3