New issue
Advanced search Search tips

Issue 758452 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 757181
Owner: ----
Closed: Aug 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Bug



Sign in to add a comment

Page loading failed with "ERR_SSL_CLIENT_AUTH_CERT_NEEDED" error even when all certificate errors should be handled

Reported by xivans1...@gmail.com, Aug 24 2017

Issue description

Chrome Version       : 62.0.3173.0 (but i believe same behavior is also reproducible with current stable build (60))

What steps will reproduce the problem?
Using Chrome in headless mode through WS DevTools API:
>| {"method":"Page.enable","id":1}
<| {"id":1,"result":{}}
>| {"method":"Network.enable","id":2}
<| {"id":2,"result":{}}
>| {"method":"Console.enable","id":3}
<| {"id":3,"result":{}}
>| {"method":"Security.enable","id":4}
<| {"method":"Security.securityStateChanged","params":{"securityState":"neutral","schemeIsCryptographic":false,"explanations":[],"insecureContentStatus":{"ranMixedContent":false,"displayedMixedContent":false,"containedMixedForm":false,"ranContentWithCertErrors":false,"displayedContentWithCertErrors":false,"ranInsecureContentStyle":"unknown","displayedInsecureContentStyle":"unknown"},"summary":""}}
<| {"id":4,"result":{}}
>| {"params":{"override":true},"method":"Security.setOverrideCertificateErrors","id":5}
<| {"id":5,"result":{}}
>| {"params":{"url":"https://khabarovsk.mid.ru/"},"method":"Page.navigate","id":6}
<| {"method":"Page.frameStartedLoading","params":{"frameId":"31640.1"}}
<| {"method":"Network.requestWillBeSent","params":{"requestId":"31640.1","loaderId":"31640.1","documentURL":"https://khabarovsk.mid.ru/","request":{"url":"https://khabarovsk.mid.ru/","method":"GET","headers":{"Accept-Language":"ru-RU","Upgrade-Insecure-Requests":"1","User-Agent":"Mozilla/5.0 (compatible; 2gisbot/1.0)"},"mixedContentType":"none","initialPriority":"VeryHigh","referrerPolicy":"no-referrer-when-downgrade"},"timestamp":631208.296971,"wallTime":1502702112.17628,"initiator":{"type":"other"},"type":"Document","frameId":"31640.1"}}
<| {"id":6,"result":{"frameId":"31640.1"}}
<| {"method":"Network.loadingFailed","params":{"requestId":"31640.1","timestamp":631208.402082,"type":"Document","errorText":"net::ERR_SSL_CLIENT_AUTH_CERT_NEEDED","canceled":false}}
<| {"method":"Network.requestServedFromCache","params":{"requestId":"31640.2"}}
<| {"method":"Network.loadingFinished","params":{"requestId":"31640.2","timestamp":631208.402635,"encodedDataLength":0}}
<| {"method":"Security.securityStateChanged","params":{"securityState":"neutral","schemeIsCryptographic":true,"explanations":[{"securityState":"secure","summary":"Valid certificate","description":"The connection to this site is using a valid, trusted server certificate issued by unknown name.","hasCertificate":false,"mixedContentType":"none"},{"securityState":"secure","summary":"Secure resources","description":"All resources on this page are served securely.","hasCertificate":false,"mixedContentType":"none"}],"insecureContentStatus":{"ranMixedContent":false,"displayedMixedContent":false,"containedMixedForm":false,"ranContentWithCertErrors":false,"displayedContentWithCertErrors":false,"ranInsecureContentStyle":"insecure","displayedInsecureContentStyle":"neutral"},"summary":""}}
<| {"method":"Security.securityStateChanged","params":{"securityState":"neutral","schemeIsCryptographic":true,"explanations":[{"securityState":"secure","summary":"Valid certificate","description":"The connection to this site is using a valid, trusted server certificate issued by unknown name.","hasCertificate":false,"mixedContentType":"none"},{"securityState":"secure","summary":"Secure resources","description":"All resources on this page are served securely.","hasCertificate":false,"mixedContentType":"none"}],"insecureContentStatus":{"ranMixedContent":false,"displayedMixedContent":false,"containedMixedForm":false,"ranContentWithCertErrors":false,"displayedContentWithCertErrors":false,"ranInsecureContentStyle":"insecure","displayedInsecureContentStyle":"neutral"},"summary":""}}
<| {"method":"Page.frameNavigated","params":{"frame":{"id":"31640.1","loaderId":"31640.2","url":"data:text/html,chromewebdata","securityOrigin":"://","mimeType":"text/html","unreachableUrl":"https://khabarovsk.mid.ru/"}}}
<| {"method":"Page.loadEventFired","params":{"timestamp":631208.404165}}
<| {"method":"Page.frameStoppedLoading","params":{"frameId":"31640.1"}}
<| {"method":"Page.domContentEventFired","params":{"timestamp":631208.404538}}

When i'm turning on 'Network.setRequestInterceptionEnabled' feature all became even more weird:

>| {"method":"Page.enable","id":1}
<| {"id":1,"result":{}}
>| {"method":"Network.enable","id":2}
<| {"id":2,"result":{}}
>| {"method":"Console.enable","id":3}
<| {"id":3,"result":{}}
>| {"method":"Security.enable","id":4}
<| {"method":"Security.securityStateChanged","params":{"securityState":"neutral","schemeIsCryptographic":false,"explanations":[],"insecureContentStatus":{"ranMixedContent":false,"displayedMixedContent":false,"containedMixedForm":false,"ranContentWithCertErrors":false,"displayedContentWithCertErrors":false,"ranInsecureContentStyle":"unknown","displayedInsecureContentStyle":"unknown"},"summary":""}}
<| {"id":4,"result":{}}
>| {"params":{"enabled":true},"method":"Network.setRequestInterceptionEnabled","id":5}
<| {"id":5,"result":{}}
>| {"params":{"override":true},"method":"Security.setOverrideCertificateErrors","id":6}
<| {"id":6,"result":{}}
>| {"params":{"url":"https://khabarovsk.mid.ru/"},"method":"Page.navigate","id":7}
<| {"method":"Network.requestIntercepted","params":{"interceptionId":"id-1","request":{"url":"https://khabarovsk.mid.ru/","method":"GET","headers":{"Accept-Language":"ru-RU","Upgrade-Insecure-Requests":"1","User-Agent":"Mozilla/5.0 (compatible; 2gisbot/1.0)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8"},"initialPriority":"VeryHigh","referrerPolicy":"no-referrer-when-downgrade"},"resourceType":"Document"}}
<| {"method":"Page.frameStartedLoading","params":{"frameId":"6476.1"}}
<| {"method":"Network.requestWillBeSent","params":{"requestId":"6476.1","loaderId":"6476.1","documentURL":"https://khabarovsk.mid.ru/","request":{"url":"https://khabarovsk.mid.ru/","method":"GET","headers":{"Accept-Language":"ru-RU","Upgrade-Insecure-Requests":"1","User-Agent":"Mozilla/5.0 (compatible; 2gisbot/1.0)"},"mixedContentType":"none","initialPriority":"VeryHigh","referrerPolicy":"no-referrer-when-downgrade"},"timestamp":631538.504865,"wallTime":1502702442.38417,"initiator":{"type":"other"},"type":"Document","frameId":"6476.1"}}
<| {"id":7,"result":{"frameId":"6476.1"}}
>| {"params":{"interceptionId":"id-1"},"method":"Network.continueInterceptedRequest","id":8}
<| {"id":8,"result":{}}
<| {"method":"Network.loadingFailed","params":{"requestId":"6476.1","timestamp":631538.617714,"type":"Document","errorText":"net::ERR_ABORTED","canceled":true}}
<| {"method":"Page.frameStoppedLoading","params":{"frameId":"6476.1"}}

What is the expected result?
Security.certificateError event should be raised, so it should be possible to ignore certificate error.


What happens instead?
Network.loadingFailed event is raising with "errorText":"net::ERR_SSL_CLIENT_AUTH_CERT_NEEDED".


Little more info here - https://groups.google.com/a/chromium.org/forum/#!topic/headless-dev/KNxmOhQ41eY.

 
Mergedinto: 757181
Status: Duplicate (was: Unconfirmed)
Thanks for the report, I'm merging this issue with a related now and we'll further investigate

Sign in to add a comment