SSL Mutual Authentication

[stariq]

Hello,

I have a project which requires embedding a browser into a Windows native application, the natural choice was CEF and all seems well. That was until the project requirements came to demand support for SSL Mutual authentication. We have an enrollment process which installs the client certificate into the Windows certificate store, but I'm struggling with CEF and understanding how to present the challenging site with the stored certificate.

Any help would be massively appreciated.

Thanks
Tariq

[magreenblatt]

Using branch 2272 or newer you can implement CefRequestHandler::OnCertificateError and verify the certificate in your application before accepting it.

[stariq]

Ah - Maybe a little confusion; I'm hoping to be challenged for a client certificate to authenticate my session, not validating some certificates presented by the server.

Thanks,
Tariq

[magreenblatt]

Ah - Maybe a little confusion; I'm hoping to be challenged for a client certificate to authenticate my session, not validating some certificates presented by the server.

Does it currently work in Google Chrome? If so, how do you configure it? If not, it won't work in CEF either.

[magreenblatt]

Client certificates appear to be handled via ResourceLoader::OnCertificateRequested and SSLClientAuthHandler in Chrome. A similar implementation will be required in CEF to support client certificates. You're welcome to add an issue in the CEF issue tracker, however you will likely need to implement this functionality yourself (or hire someone to do it for you).

[stariq]

however you will likely need to implement this functionality yourself (or hire someone to do it for you).

I don't suppose you could put me in touch with a contractor who would be skilled enough to take on this challenge?

[magreenblatt]

however you will likely need to implement this functionality yourself (or hire someone to do it for you).

I don't suppose you could put me in touch with a contractor who would be skilled enough to take on this challenge?

I replied to you in PM. We can continue the conversation there.

[sdnorton]

Hello,

I am interested in support for this as well. Could you let us know the progress or plan (if there is one) for getting support for client certificates into the master branch (or any branch really)?

Thank you
Steve

[magreenblatt]

Could you let us know the progress or plan (if there is one) for getting support for client certificates into the master branch (or any branch really)?

There is no additional information available at this time.