Question
Puppeteer ↔ WebSocket: Does ignoreHTTPSErrors Bypass Certificate Validation?
Lax Dey
0 reputation · 13 Oct 2022, 18:58 UTC
78.2K views0
Goal
Determine whether the ignoreHTTPSErrors:true launch option in Puppeteer also suppresses SSL certificate errors for WebSocket connections initiated from a page.
Current Constraints
- Chromium’s
ignoreHTTPSErrorsflag is documented to affect navigation, XHR, and fetch, but its coverage of WebSocket handshakes remains unverified. - Puppeteer exposes the flag via launch options but offers no API to adjust certificate validation per WebSocket request.
- Different Chromium revisions may treat WebSocket SSL checks differently, and the behavior might vary across OS platforms.
Unresolved Questions
- When
ignoreHTTPSErrors:trueis set, does the WebSocket handshake succeed against a server presenting a self‑signed certificate? - If the flag does not apply to WebSockets, what mechanisms (e.g., custom DNS rules, external proxies) can reliably bypass certificate validation for WebSocket connections?
- Are there version‑specific differences in Chromium that affect this behavior, and how can they be identified?