Question: Is there a way to import client certificate to pod

[cr-liorholtzman]

The company I'm working in is currently considering using Moon to replace Zalenium since it's not possible to use client-certificate when working with Zalenium

To work with a client certificate and use chrome, it is required to import it to the pod and also set "AutoSelectCertificateForUrls".
Is it something we can do using Moon? even if it means setting some specific environment variables?

[aandryashin]

Hello, currently only servers CA can be imported to pod: https://aerokube.com/moon/latest/#ca-certs We will consider implementation of mutual client TLS authentication for browser in further releases. ср, 8 мар. 2023 г. в 12:16, cr-liorholtzman ***@***.***>:

…

The company I'm working in is currently considering using Moon to replace Zalenium since it's not possible to use client-certificate when working with Zalenium To work with a client certificate and use chrome, it is required to import it to the pod and also set "AutoSelectCertificateForUrls". Is it something we can do using Moon? even if it means setting some specific environment variables? — Reply to this email directly, view it on GitHub <#373>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAKY23NFPUXD4JBFQPK7ZP3W3BE53ANCNFSM6AAAAAAVTQQWNA> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[aandryashin]

Hello, after deeper investigation, i have found that client mutual TLS authentication only requires client cert and key installed in browser profile, that is already implemented in Moon, how to upload custom browser profile to moons browser pod you can find here: https://blog.aerokube.com/selenium-moon-environment-provisioning-72402242c917 ср, 8 мар. 2023 г. в 12:41, Alexander Andryashin ***@***.***>:

…

Hello, currently only servers CA can be imported to pod: https://aerokube.com/moon/latest/#ca-certs We will consider implementation of mutual client TLS authentication for browser in further releases. ср, 8 мар. 2023 г. в 12:16, cr-liorholtzman ***@***.***>: > The company I'm working in is currently considering using Moon to replace > Zalenium since it's not possible to use client-certificate when working > with Zalenium > > To work with a client certificate and use chrome, it is required to > import it to the pod and also set "AutoSelectCertificateForUrls". > Is it something we can do using Moon? even if it means setting some > specific environment variables? > > — > Reply to this email directly, view it on GitHub > <#373>, or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AAKY23NFPUXD4JBFQPK7ZP3W3BE53ANCNFSM6AAAAAAVTQQWNA> > . > You are receiving this because you are subscribed to this thread.Message > ID: ***@***.***> >

[slunyaak]

Hi,
uploading new profile in Moon pod works. But the question is how to add into profile client certificate. I have tried following: I started Moon Chrome browser, imported in it required client certificate for mutual TLS authentication and then downloaded profile. After that I followed instruction from Moon documentation in order to upload custom Chrome profile. I did make sure, that upload of new profile was successful. Unfortunately this solution did not worked. The client certificate was not present in the Moon browser after profile upload. After that I investigated that subject a little bit and I found that client certificates aren't normally stored in Chrome profile, but in host OS. So could you please advise, how to make working following solution "client mutual TLS authentication only requires client cert and key installed in browser profile"?

Thank you

[aandryashin]

Have you added chrome argument --user-data-dir to point to your custom profile? чт, 2 мая 2024 г. в 10:29, slunyaak ***@***.***>:

…

Hi, uploading new profile in Moon pod works. But the question is how to add into profile client certificate. I have tried following: I started Moon Chrome browser, imported in it required client certificate for mutual TLS authentication and then downloaded profile. After that I followed instruction from Moon documentation in order to upload custom Chrome profile. I did make sure, that upload of new profile was successful. Unfortunately this solution did not worked. The client certificate was not present in the Moon browser after profile upload. After that I investigated that subject a little bit and I found that client certificates aren't normally stored in Chrome profile, but in host OS. So could you please advise, how to make working following solution "client mutual TLS authentication only requires client cert and key installed in browser profile"? Thank you — Reply to this email directly, view it on GitHub <#373 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAKY23IU3D6T2FA6SE3YZOLZAHTMHAVCNFSM6AAAAAAVTQQWNCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAOBZG44TKMRZHE> . You are receiving this because you commented.Message ID: ***@***.***>

[slunyaak]

Yes, I have added it, this is used code:

   ChromeOptions options = new ChromeOptions();

    options.setCapability("moon:options", Map.of("context", "http://WWeebbHHoosstt/profile.tar.gz"));

    options.addArguments("--user-data-dir=/home/user/profile");
    try {
        WebDriver driver = new RemoteWebDriver(new URL("http://MMoonnHHoosstt/wd/hub"), options);
    } catch (MalformedURLException e){

    }

[aandryashin]

Hello! After installing the certificate in the browser you have to download not a profile and /home/user/.pki directory that will contain your installed certificate, then you can upload it to moon pod using moon context feature. Sorry for the confusion. Actually context allows you to upload any custom user's configuration. чт, 2 мая 2024 г. в 16:15, slunyaak ***@***.***>:

…

Yes, I have added it, this is used code: ChromeOptions options = new ChromeOptions(); options.setCapability("moon:options", Map.of("context", "http://WWeebbHHoosstt/profile.tar.gz")); options.addArguments("--user-data-dir=/home/user/profile"); try { WebDriver driver = new RemoteWebDriver(new URL("http://MMoonnHHoosstt/wd/hub"), options); } catch (MalformedURLException e){ } — Reply to this email directly, view it on GitHub <#373 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAKY23JHKXXAEQKWO2HH4PLZAI36FAVCNFSM6AAAAAAVTQQWNCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAOJQGQ3TGNJUHA> . You are receiving this because you commented.Message ID: ***@***.***>

[slunyaak]

Hi, thank you!, Uploading /home/user/.pki with imported client certificate using Moon context feature was the right solution.

[vania-pooh]

@slunyaak so this is now resolved, right?