Re: Can WebView ignore SSL Certificate errors?

[Benoît Minisini <benoit.minisini@xxxxxxxxxxxxxxxx>]

Le 06/05/2025 à 21:07, Lee a écrit :
> I am loading a website in a WebView that always causes SSL handshake 
> errors and somewhat randomly a SSL Certificate error. I suspect the 
> Certificate error is due to a randomly displayed advertisement on the 
> target website as its domain name is different. This is a sample of the 
> errors including the random Certificate error:
>
> ~~~~~~
> [13424:13457:0506/142520.651685:ERROR:ssl_client_socket_impl.cc(960)] 
> handshake failed; returned -1, SSL error code 1, net_error -101
> [13424:13457:0506/142520.699105:ERROR:ssl_client_socket_impl.cc(960)] 
> handshake failed; returned -1, SSL error code 1, net_error -100
> [13424:13450:0506/142557.182793:ERROR:cert_verify_proc_builtin.cc(637)] 
> CertVerifyProcBuiltin for eyeota.ck-ie.com failed:
> ----- Certificate i=0 (CN=ck-ie.com) -----
> ERROR: Time is after notAfter
>
>
> [13424:13457:0506/142557.183694:ERROR:ssl_client_socket_impl.cc(960)] 
> handshake failed; returned -1, SSL error code 1, net_error -201
> [13424:13457:0506/142603.344811:ERROR:ssl_client_socket_impl.cc(960)] 
> handshake failed; returned -1, SSL error code 1, net_error -101
> [13424:13457:0506/142603.444789:ERROR:ssl_client_socket_impl.cc(960)] 
> handshake failed; returned -1, SSL error code 1, net_error -100
> ~~~~~~
>
> The website eventually loads, but it can take over 60 seconds to do it.
>
> I am certain that I could not inherit WebView and get at its internals 
> with Gambas code. But if I am wrong, I like to know.
>
> Would it be a complex task to add a "Ignore Certificate Errors" flag to 
> WebSettings?

I don't know. You have to check the documentation of Qt WebEngine and 
WebkitGTK+ to see if they allow such a thing. I don't remember having 
seen that, but there is some sort of object in both toolkits that can 
intercept any network request. Maybe it's where searching should be done.

> And, BTW, is completion of the gb.qt5.webview documentation somewhere on 
> the Gambas roadmap? (I can't do it on the Wiki because the symbols are 
> loaded by "@symbols".)

I write documentation when I have time. But I don't understand what you 
say, anyone can write the documentation.

Regards,

--
Benoît Minisini.