CODEWITHSUNDEEP
.net-corewebview2
Anonymous
Anonymous

Reputation: 1988

Bypass invalid SSL certificate for Kestrel server displayed in WebView2

Given

Results

Question

Windows settings shouldn't be touched, e.g. marking "localhost" certificate as trusted in "msmc" or generating self-signed certificates, because this WPF app is supposed to run on different computers.

In other words, there must be an easier way than described in this article.

Kestrel

public class WebServer
{
  public static Task Run()
  {
    var configuration = new ConfigurationBuilder().Build();

    var urls = new[]
    {
      "http://0.0.0.0:7000",
      "https://0.0.0.0:8000"
    };

    var environment = WebHost
      .CreateDefaultBuilder(new string[0])
      .UseConfiguration(configuration)
      .UseUrls(urls)
      .UseContentRoot(Directory.GetCurrentDirectory())
      .UseIISIntegration()
      .UseStartup<WebStartup>();

    return environment.Build().RunAsync();
  }
}

public class WebStartup
{
  public IConfiguration Configuration { get; }

  public WebStartup(IConfiguration configuration)
  {
    Configuration = configuration;
  }

  public void ConfigureServices(IServiceCollection services)
  {
    services.AddSpaStaticFiles(configuration =>
    {
      configuration.RootPath = "index.html";
    });
  }

  public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
  {
    app.UseDeveloperExceptionPage();
    //app.UseHsts();
    //app.UseHttpsRedirection();
    app.UseStaticFiles();
    app.UseSpaStaticFiles();
  }
}

WebView2 Control in WPF

public MainWindow()
{
  WebServer.Run();

  InitializeComponent();

  WebView.Source = new Uri("https://127.0.0.1:6000/index.html"); // HTTP on 5000 works, HTTPS 6000 - no
  WebView.NavigationCompleted += (object sender, CoreWebView2NavigationCompletedEventArgs args) =>
  {
    WebView.InvalidateVisual();
  };
}

Upvotes: 4

Views: 2667

Answers (3)

gregmac
gregmac

Reputation: 25321

Simplifying @padoc's answer:

await webView21.EnsureCoreWebView2Async(
    await CoreWebView2Environment.CreateAsync(
        options: new CoreWebView2EnvironmentOptions(
            additionalBrowserArguments: "--ignore-certificate-errors")));

Upvotes: 0

pedoc
pedoc

Reputation: 1

extensions

 public static CoreWebView2EnvironmentOptions AddArg(this CoreWebView2EnvironmentOptions options, string arg)
        {
            options.AdditionalBrowserArguments += $" {arg}";
            return options;
        }
        public static CoreWebView2EnvironmentOptions AddArg(this CoreWebView2EnvironmentOptions options, string arg,string value)
        {
            options.AdditionalBrowserArguments += $" {arg}={value}";
            return options;
        }

manual config

 var env = await CoreWebView2Environment.CreateAsync(userDataFolder: "Cache",
                    options:new CoreWebView2EnvironmentOptions()
                        .AddArg("--ignore-certificate-errors")
                    );
                await _webBrowser.EnsureCoreWebView2Async(env);

Upvotes: 0

David Risney
David Risney

Reputation: 4377

The WebView2 doesn't currently directly expose that feature. If you like, you can open an issue in WebView2 Feedback and we can make a feature request.

As a workaround you might try using the CoreWebView2.CallDevToolsProtocolMethodAsync method to invoke the Security.setIgnoreCertificateErrors DevTools Protocol method. However, I haven't tried setIgnoreCertificateErrors out, and its also marked experimental so not positive it will work in the manner you'd like.

Upvotes: 5

Related Questions