Add --insecure flag to ignore certificate errors#10
Closed
zgolus wants to merge 3 commits intosimonw:mainfrom
Closed
Add --insecure flag to ignore certificate errors#10zgolus wants to merge 3 commits intosimonw:mainfrom
zgolus wants to merge 3 commits intosimonw:mainfrom
Conversation
Adds --insecure/-k flag to the start command to bypass certificate validation, enabling rodney to access HTTPS sites with self-signed or invalid certificates. When --insecure is set, Chrome launches with --ignore-certificate-errors. The flag is also automatically enabled when using an authenticated proxy. Includes test coverage verifying that navigation fails with ERR_CERT_AUTHORITY_INVALID without the flag, and succeeds with it. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
The TestInsecureFlag test intentionally causes a TLS handshake error when verifying that certificate validation works. Suppress this expected error log to keep test output clean for CI.
Owner
|
I had Claude knock out a quick Go test server that uses a self-signed certificate: https://gist.github.com/simonw/29f72b400110cfcdfbfccf2847c7338a Run like this: git clone https://gist.github.com/simonw/29f72b400110cfcdfbfccf2847c7338a
cd 29f72b400110cfcdfbfccf2847c7338a
go run .Starts a server here: Then you can: curl 'https://localhost:8443'But this works: curl -k 'https://localhost:8443' |
Owner
|
Testing manually against that server: Then with the new option: Worked perfectly. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds a
--insecure(or-k) flag to thestartcommand for accessing HTTPS sites with self-signed or invalid certificates.Useful when testing against local development servers or internal services with custom CAs.
Usage
Without the flag, you get
ERR_CERT_AUTHORITY_INVALID. With it, the page loads.Changes
--insecure/-kflag that sets Chrome's--ignore-certificate-errors