RoyalTS: web page certificate

Questions Royal TS (for Windows)
1

Hello everyone,

when trying to connect with RoyalTS to some web pages, it asks me on some webpages to chosse a certificate.

I have to web pages, both using a letsencrypt certificate. One asks me for a certificate every time (attachment), the other works fine without any interruption.Couldn’t find any differences beetween these two. When aborting the prompt for a certificate, the web pages loads without any issues. I tried direct connection and also via a royalserver gateway.

I did not find any useful in https://docs.royalapps.com/r2023/royalts/reference/connections/web-page-chrome.html

Someone can explain me how RoyalTS WebPages deals with certificates and what to look for?

image
image502×468 13.3 KB

2

Hi,

the dialog you see shows up if the remote server asks for a client certificate. This has nothing to do with server/https certificates. It also seems that the server does not require you to provide a client certificate, that’s why the page seems to load fine when cancelling the prompt. You can find more information about the implementation details here:

https://www.essentialobjects.com/doc/eo.webbrowser.webview.needclientcertificate.html

What kind of web page is prompting you for a client certificate? Is this an in-house app or a public web site where you can contact the owner for more information?

Regards,
Stefan

3

Hi Stefan,

First, a big thank you for always answering my questions here :slight_smile:

I did not notice that it is asking for a client certificate. Thanks for pointing that out.

It’s the website from the FortiClient EMS (Endpoint Management Server).

I did install chrome to test the website with it -> no certificate prompt. Maybe I just don’t see it in the browser or it only is appearing when using RoyalTs…

4

Your very welcome! Always happy to help.

Maybe the difference in behavior is related to the user agent string? Maybe you can also look at the dev tools (in both Chrome and Royal TS) to find out why you see the prompt in Royal TS.

5

Just wanted to add to this topic:

With the last update my web page-connections in RoyalTS didn’t work anymore (error code:-336)

I had to create them for new and now the websites work without asking for a certifcate. So maybe there was something wrong with my installation.

6

That’s weird. I can’t really think of anything which could “break” web page connections in that way. I’m wondering what happened. If you see that again, please open a support ticket so that we can have a look.

7

Sure! Thanks for your effort.

8

Hi everyone, since some time I have a similar problem with my Fortigate firewalls: Everytime I open the login page within RoyalTS, I am asked for a client certificate. I have to close this window and then I could use RoyalTS automation to login.

If I open the login page outside of RoyalTS with Chrome, this certificate popup does not show up. Would be nice to have an option to disable this certificate popup in RoyalTS …

9

Hi Michael,

I did stop using the integrated browser in RoyalTS because I couldn’t figure out how to disable / bypass / accept the warning…

It appears on several Fortinet products

10

I will look into it and see if I can offer an option to disable client certificate prompts.

11

Hi,

the next release will provide some options on how to deal with client certificates.

Regards,
Stefan

12

This is awesome!

Thank you very much :slight_smile:

13

@Stefan:

I was prompted this moment to install the new version and I can select to ignore client certificate notifications when browsing to fortinet products :slight_smile:

One more positive argument for me trying to get all our administrative workloads onto a royalts server :slight_smile:

Thank you very much!!!

14

Thanks a lot!!