SSL certificate exceptions in Web+

Is it possible to make an exception in WebPositive for a website that uses an invalid SSL certificate (like you can in Firefox)? Or can I add the cert somewhere manually so that Web+ will accept it and load the page.

Of course I know about the security implications, this is not a concern here because it all happens in my virtual test network that is not connected to the internet.

No, this functionality doesn’t exist currently. If you want you can open a ticket for it. :slight_smile:

Edit: what do you mean by invalid though? If it is just untrusted you can add the CA root cert to the system trust store atleast (and the run openssl rehash). Sorry this is still a bit manual

2 Likes

I’d rather not. It’s probably better if it’s not so easy for users to accept certificates that are not trusted.

Sorry, I was a bit unspecific here, should have said “untrusted”. It’s a self-signed certificate for the web interface of an OPNsense test installation. Adding the CA root certificate sounds good. How would I do that on Haiku? The main data directory for openssl seems to be /boot/system/data/ssl, but that is read only of course.

EDIT: I looked at the patches for openssl at haikuports, the writable data directory is under B_SYSTEM_NONPACKAGED_DATA_DIRECTORY (/boot/system/non-packaged/data)

Yes, put your root cert in boot/system/non-packaged/data/ssl/ and then run openssl rehash, it should add some wierd symlinked file, and after that it should work (the rehash should be done with file watching instead, of course…)

Ok, great. I’ll try tomorrow and will report back.