Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Should office-addin-dev-certs work for browsers? #841

Open
eekboom opened this issue Feb 27, 2024 · 2 comments
Open

Should office-addin-dev-certs work for browsers? #841

eekboom opened this issue Feb 27, 2024 · 2 comments

Comments

@eekboom
Copy link

eekboom commented Feb 27, 2024

The stackoverflow tag linked on https://github.com/OfficeDev/Office-Addin-Scripts is completely empty, so please allow me to ask a question here:

Should the certificate that gets created by office-addin-dev-certs be accepted by browsers, so that I can use it for general web app development?
Or is it only suitable for the specific use case of outlook loading its add-in?

I tried to use it as certificate when starting my app with parcel and when trying to open https://localhost:3000/ Firefox says SSL_ERROR_RX_RECORD_TOO_LONG while Chrome and Edge report ERR_SSL_PROTOCOL_ERROR :-(
As far as I understood the certificate is issued for "localhost" and "127.0.0.1" and should not be restricted to a specific port, right?

Would be so cool to have locally created certificates automatically be accepted in the browser while developing!

@eekboom
Copy link
Author

eekboom commented Feb 27, 2024

Hm, when using default port 443:

  • Firefox: ❌ SEC_ERROR_BAD_SIGNATURE
  • Chrome, Edge: ✅ work fine

So I guess there are two requests here:
Make the certificate work on other ports.
Install it into firefox, too (optionally?)

@akrantz
Copy link
Contributor

akrantz commented Feb 28, 2024

Not sure what is required for Firefox to trust the CA cert, but Chrome and Edge will trust it since it is in the Windows trusted root certificate store. SSL uses port 443 by default, but I don't think there is anything specific about the port. The cert is used to validate the IP address and domain name. The --domains option allows changing the domain names and IP addresses to be specified in the cert.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants