有没有办法从 Chrome 扩展访问证书信息

素材狗 2022-01-01 10:25:45 文章分类：前端问题点击数：2次

文章标签

Is there any way to access certificate information from a Chrome Extension(有没有办法从 Chrome 扩展访问证书信息)

本文介绍了有没有办法从 Chrome 扩展访问证书信息的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！

问题描述

我想从 Google Chrome 扩展程序访问 SSL 证书信息.

I'd like to access SSL certificate information from a Google Chrome extension.

我在这里查看了 API:http://code.google.com/chrome/extensions/api_index.html，但没有看到任何可以完成工作的内容.

I took a look at the APIs here: http://code.google.com/chrome/extensions/api_index.html, but didn't see anything that would get the job done.

理想情况下，我想访问发行者、有效期、主题、序列号等...

Ideally I'd like to get access to Issuer, Validity Period, Subject, Serial Number, etc...

这在 Mozilla/Firefox 中似乎是可能的:

This seems to be possible in Mozilla/Firefox:

https://developer.mozilla.org/En/How_to_check_the_security_state_of_an_XMLHTTPRequest_over_SSL

http://www.sslshopper.com/article-perspectives-extension-to-change-how-firefox-handles-ssl-certificates.html

2018 回答:webextensions(使用 Chrome 扩展 API)可以在 Firefox 62 中做到这一点

您需要制作一个 WebExtension，也称为浏览器扩展.

2018 answer: webextensions (which use the Chrome extension API) can do this in Firefox 62

You'll need to make a WebExtension, which is also called a browser extension.

请参阅访问 MDN 上的安全信息

您还可以查看以下文档:

You can also check out the docs for:

getSecurityInfo
SecurityInfo
CertificateInfo.

您需要 Firefox 62.

You'll need Firefox 62.

这是一个有效的 background.js

var log = console.log.bind(console)

log(`

TLS browser extension loaded`)

// https://developer.chrome.com/extensions/match_patterns
var ALL_SITES = { urls: ['<all_urls>'] }

// Mozilla doesn't use tlsInfo in extraInfoSpec 
var extraInfoSpec = ['blocking']; 

// https://developer.mozilla.org/en-US/Add-ons/WebExtensions/API/webRequest/onHeadersReceived
browser.webRequest.onHeadersReceived.addListener(async function(details){
    log(`

Got a request for ${details.url} with ID ${details.requestId}`)

    // Yeah this is a String, even though the content is a Number
    var requestId = details.requestId

    var securityInfo = await browser.webRequest.getSecurityInfo(requestId, {
        certificateChain: true,
        rawDER: false
    });

    log(`securityInfo: ${JSON.stringify(securityInfo, null, 2)}`)

}, ALL_SITES, extraInfoSpec) 

log('Added listener')

manifest.json:

{
    "manifest_version": 2,
    "name": "Test extension",
    "version": "1.0",
    "description": "Test extension.",
    "icons": {
        "48": "icons/border-48.png"
    },
    "background": {
        "scripts": ["background.js"]
    },
    "permissions": [
        "webRequest",
        "webRequestBlocking",
        "<all_urls>"
    ]
}