We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Denc nañu waxtaan wii. Yónneel yeneen laaj soo soxlaa ndimbal.

Is there way to check via javascript if my self-signed certificate is installed in my browser

  • 1 tontu
  • 3 am na jafe-jafe bii
  • 4 views
  • i mujjee tontu mooy dveditz

inmjava
inmjava
more options

At the company where I work we chose to create a self-signed certificate and try to install it on all browsers. It was possible to place it in Internet Explorer and Google Chrome but fail in Firefox. We create a page similar to this (http://br.mozdev.org/firefox/caixa) and would like to display it if the browser does not have the public key installed. Is there a way to check via javascript whether a certificate is installed in the browser?

At the company where I work we chose to create a self-signed certificate and try to install it on all browsers. It was possible to place it in Internet Explorer and Google Chrome but fail in Firefox. We create a page similar to this (http://br.mozdev.org/firefox/caixa) and would like to display it if the browser does not have the public key installed. Is there a way to check via javascript whether a certificate is installed in the browser?

All Replies (1)

dveditz
dveditz
more options

There's no simple JavaScript "is this installed" method, but you might be able to detect it through fingerprinting tricks.

  1. host an image on a site whose cert is issued by the root you want to detect.
  2. write a function redirectToCertPage()
  3. on the page you wanted to check from add 
   <img src="https://the_site/the_image" onerror="redirectToCertPage()">

If the onerror fires the user most likely doesn't have the certificate installed. There might be less likely reasons the user can't reach the image (machine down, someone moved the image file) but it should do.

dveditz moo ko soppali ci