9

I'm using Webbrowser control to login to HTTPS site with "untrusted certificate". but I get popup such standart window "Security Alert" about untrusted certificate:

Security Alert window

I have to find this window by title and send it Alt+Y to press Yes:

int iHandle = NativeWin32.FindWindow(null, "Security Alert");
NativeWin32.SetForegroundWindow(iHandle);
System.Windows.Forms.SendKeys.Send("Y%");

but user can see a flickering of this window.

How can I ignore this alert?
Or disable this "untrusted certificate" check in Webbrowser control?

Marek Grzenkowicz
  • 17,024
  • 9
  • 81
  • 111
user25826
  • 123
  • 1
  • 1
  • 4
  • possible duplicate of [WebBrowser control - ignore SSL errors](http://stackoverflow.com/questions/6933254/webbrowser-control-ignore-ssl-errors) – Sheng Jiang 蒋晟 Jul 17 '13 at 16:52
  • See also: SSL errors in WebBrowser controls for console apps http://stackoverflow.com/questions/17698002/ignoring-web-browser-ssl-security-alerts-in-console-application/21008529 – Steven de Salas Jan 15 '15 at 00:43

5 Answers5

3

This should do it:

public static bool ValidateServerCertificate(object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors sslPolicyErrors)
{
    return true;
}

ServicePointManager.ServerCertificateValidationCallback = new RemoteCertificateValidationCallback(ValidateServerCertificate);

Obviously, blindingly allowing certificates is a security risk. Be careful.

bobwienholt
  • 17,420
  • 3
  • 40
  • 48
  • 3
    I couldn't get this to work with the WebBrowser control. It may be just me, but I suspect this solution isn't applicable as the System.Windows.Forms.WebBrowser control isn't sending requests via .NET. – Daniel Ballinger Jun 27 '12 at 03:10
  • 1
    @DanielBallinger It's not just you. I am having the [same problem](http://stackoverflow.com/q/12999735/1357272). – ih8ie8 Oct 21 '12 at 16:27
  • This is for managed objects ONLY. Webbrowser control is a wrapped unmanaged control. This is why this doesn't work. – Odys Nov 15 '12 at 14:20
1

If the certificate isn't from a trusted certifying authority (the first point in the prompt) then you could install the certificate under the Trusted Root Certification Authorities on the PCs in question.

You can do this under View Certificate.

In some ways this could be a simpler solution as it doesn't require any code changes that accept any and all certificates. It does however require the certificate to be installed wherever the application is used.

Daniel Ballinger
  • 13,187
  • 11
  • 69
  • 96
  • Looks like a great idea, but I just tried it and [it didn't work for me](http://stackoverflow.com/q/12999735/1357272) for some reason. Any ideas why? – ih8ie8 Oct 21 '12 at 16:42
1

Here,we go with the solution: I run it on the Browser_Navigated event as the underlying activeX component is null until then.

Ref:https://social.msdn.microsoft.com/Forums/vstudio/en-US/4f686de1-8884-4a8d-8ec5-ae4eff8ce6db/new-wpf-webbrowser-how-do-i-suppress-script-errors?forum=wpf

         private void Browser_Navigating_1(object sender, NavigatingCancelEventArgs e)
        {
        HideScriptErrors(Browser,true);

        }

    public void HideScriptErrors(WebBrowser wb, bool Hide)
    {

        FieldInfo fiComWebBrowser = typeof(WebBrowser).GetField("_axIWebBrowser2", BindingFlags.Instance | BindingFlags.NonPublic);
        if (fiComWebBrowser == null) return;
        object objComWebBrowser = fiComWebBrowser.GetValue(wb);

        if (objComWebBrowser == null) return;

        objComWebBrowser.GetType().InvokeMember(
        "Silent", BindingFlags.SetProperty, null, objComWebBrowser, new object[] { Hide });

    }
VCody
  • 506
  • 3
  • 12
0

When I set the WebBrowser.ScriptErrorsSuppressed property to false, I do not get these popups anymore

Adil
  • 231
  • 3
  • 6
-1

I see this solution.it work for me.It very easy way.