Question
Electron 28: ordering of session.setCertificateVerifyProc callbacks remains undefined
Rin Byte
0 reputation · 21 Apr 2021, 19:17 UTC
70.9K views0
Goal
Determine the deterministic order in which multiple certificate verification callbacks are executed when several sessions or handlers are registered in an Electron 28 application.
Constraints & Uncertainty
- Electron’s
session.setCertificateVerifyProcallows per‑session overrides, but the API documentation does not specify callback priority. - When the global flag
--ignore-certificate-errorsis present, all validation is bypassed, yet it is unclear whether this flag alters the invocation order of custom handlers. - Electron 28 added
session.setCertificatePinnedKeys, but its interaction withsetCertificateVerifyProcis not documented, raising questions about precedence.
Specific Questions
- What is the execution order of multiple
certificateVerifyProccallbacks registered across different sessions in Electron 28? - Does the
--ignore-certificate-errorsflag override or otherwise affect the ordering of these callbacks? - When both
setCertificatePinnedKeysandsetCertificateVerifyProcare used, which mechanism takes precedence in certificate validation?