How to get a list of certificates using JavaScript or jQuery?

We use the Applet earlier to obtain the keystore certificates installed on the client machine. Now, when chrome stops NPAPI, the applet is no longer working, so find some solution using Javascript / jQuery.

I am trying to get a general list of certificates to install in KeyStore, but I can not find any solutions. Does anyone know how to get a complete list of certificates using JavaScript or jQuery?

+6
source share
2 answers

You cannot do this using JavaScript running on the client.

See the following entry on the WebCrypto mailing list :

On Wed, June 24, 2015 at 13:50, Jeffrey Walton wrote:

I see that the WebCrypto API will allow keys to be opened ( http://www.w3.org/TR/WebCryptoAPI/ ):

In addition to operations such as signature generation and verification, hashing and verification, as well as encryption and decryption, the API provides interfaces for key generation, key generation, import and export of keys, and key discovery.

Certificates have public keys, and they are not as sensitive as private keys.

Will the WebCrypto API allow certificate discovery / enumeration?

Examples of what I would like to open or list (in addition to private keys):

  • Reliable roots
  • Customer certificates

Reliable roots are in the platform trust repository. Client certificates can be in the trust store.

Thanks in advance, Jeff

Chrome has no plans to implement such, we hope, obvious and significant reasons for privacy.

Client certificates contain PII. Trusted certificates contain PII and fingerprints.

In modern, isolated operating systems such as iOS and Android, applications also cannot list, as these platform providers have come to the same conclusion.

So no. Never. one

1 For some really big value, never

+6
source

Get a clone below the link https://github.com/scketches/ffPrintCert

install jpm

npm install jpm --global 

Create build for mozilla

 jpm xpi 

Download extension in mozilla locally and check Fire below url in mozilla

 about:debugging 

Download the .xpi file from local and check.

0
source

Source: https://habr.com/ru/post/1012034/


All Articles