demo · v144 · IWA

Certificate Inspector

The motivating use case: kiosks and embedded browsers (controlled frames in Isolated Web Apps) need to inspect TLS chains for self-signed enterprise certs. webRequest.onResponseStarted now exposes securityInfo, the same dictionary DevTools Network panel shows you.

Controlled Frame / IWA only This API is only available inside a Controlled Frame in an Isolated Web App. Outside that surface, the chrome.* namespace doesn't exist.

chrome.webRequest in this context: checking…

the API

chrome.webRequest.onResponseStarted.addListener(
  details => {
    console.log(details.securityInfo);
    // { protocolVersion: "TLS 1.3",
    //   cipherSuite: "TLS_AES_256_GCM_SHA384",
    //   certificateChain: [{ subject, issuer, validFrom, validTo, fingerprint }] }
  },
  { urls: ["<all_urls>"], extraInfoSpec: ["securityInfo"] }
);

see also

scenario focus

Select a scenario to focus its rendered example and summary.