Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Accept insecure certs when launching browsers #136

Merged
merged 1 commit into from
Sep 20, 2017

Conversation

thc202
Copy link
Member

@thc202 thc202 commented Sep 19, 2017

Change ZestClientLaunch to accept "insecure" certificates when launching
the browsers, to improve the interoperability with sites and other tools
(for example, ZAP which uses a custom Root CA certificate).
The following browsers are accepting the "insecure" certificates:
Chrome, Firefox, HtmlUnit, JBD, and PhantomJS.

Chrome and HtmlUnit were already accepting the insecure certs. For
Chrome it was disabled the headless mode because of an issue that
prevents the certs from being accepted when in headless mode.

Change ZestClientLaunch to accept "insecure" certificates when launching
the browsers, to improve the interoperability with sites and other tools
(for example, ZAP which uses a custom Root CA certificate).
The following browsers are accepting the "insecure" certificates:
Chrome, Firefox, HtmlUnit, JBD, and PhantomJS.

Chrome and HtmlUnit were already accepting the insecure certs. For
Chrome it was disabled the headless mode because of an issue that
prevents the certs from being accepted when in headless mode.
@psiinon psiinon merged commit 2033b47 into zaproxy:develop Sep 20, 2017
@thc202 thc202 deleted the client-browser-ssltls branch September 20, 2017 10:58
@thc202 thc202 added this to the 0.14.0 milestone Jun 26, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

Successfully merging this pull request may close these issues.

None yet

2 participants