CODEWITHSUNDEEP
sslbrowseropenssl
jayunit100
jayunit100

Reputation: 17640

What underlying library implements the SSL cryptography for a HTTPs connection?

I would assume that you could verify an SSL certificate in the browser via Javascript. However, there are cryptographic functions and libraries implemented in C which come with tools like openSSL.

In general, do browsers need to rely on SSL libraries that are on the OS? Or, do browsers sometimes sign and verify SSL handshakes at the JS level.

Upvotes: -4

Views: 61

Answers (1)

Steffen Ullrich
Steffen Ullrich

Reputation: 123531

Chromium based browsers (including MS Edge) use BoringSSL which is a fork of OpenSSL. Firefox uses NSS. This means these browsers do not use the platform native TLS stack (like SChannel on Windows) but include their own. Safari instead uses SecureTransport, i.e. the native TLS stack on Mac.

I would assume that you could verify an SSL certificate in the browser via Javascript.

Browsers usually don't provide a way to do this in Javascript. This is instead handled by the TLS stack and not accessible from Javascript.

Upvotes: 1

Related Questions