[ANNOUNCEMENT] ClientCertificateRequested and ServerCertificateErrorDetected API changes are coming. This is a potentially breaking change.

[monica-ch]

Currently in WebView2, we expose certificate metadata using ICoreWebView2ClientCertificate and ICoreWebView2Certificate in ClientCertificateRequested and ServerCertificateErrorDetected events respectively.

We noticed that DEREncodedSerialNumber isn't converted properly to a normal string and thereby want to display the serial number as a Base64 encoding of DEREncodedSerialNumber and the type remains same.

If your application is using the serial number, it could result in a breaking change and requires the application to update the code accordingly.

Let us know if you have any questions or concerns.

[DexterWoo]

@monica-ch, Is it possible to provide ServerCertificateValidationCallback? which will allow people to validate the certificate even if it's trusted by the system?

[wilva]

That is something I had also seen and it would be great to see this addressed.

Is this issue perhaps related?
#2346

[darbid]

I hope you might be able to help me understand what a DEREncodedSerialNumber is and why you are using it. Why not use the same property as the X509Certificate2 SerialNumber

And could you by chance have an example C# code of converting the DerEncode?