Skip to main content
arteml16556299
Participant
January 22, 2018
Question

CEP8 for Windows: Certificate issue

  • January 22, 2018
  • 2 replies
  • 1007 views

We're experiencing problems with CEP for Adobe CC 2018 for Windows (Adobe Photoshop Version: 19.0 20170929.r.165 2017/09/29: 1138933 x64). It seems that CEP can't recognize certificate for *.cloudfront.net (Amazon's cloud storage). When I try to load cloudfront, error appears:

Page failed to load.
The certificate for this server is invalid. You might be connecting to a server which could put your confidential information at risk.
URL: https://d5mzcjgfvy5f.cloudfront.net/frontend/adobeaddin/3.0.1_4584/styles.css?time=1516364154000&version=3.0.1
Error: UNKNOWN (-214)

But when I open the same link in Chrome, certificate shows up as secure and valid thru 11/21/2018. And the latest Photoshop 2018 for Mac opens this link perfectly, so it seems that current CEP 8 for Windows has problems with certificate recognition. Do you have any workaround on this issue?

This topic has been closed for replies.

2 replies

sberic
Legend
January 22, 2018

Also, would would registering for certificate errors help you in any way? Perhaps it will provide you with some more information...

Participant
January 23, 2018

It seems that CSInterface.prototype.registerInvalidCertificateCallback fires only when you try to navigate to a page with certificate 'problems' in a main frame of an extension.

Our problem is that we use static resources in html (styles and scripts), which are hosted on cloudfront. In this case, callback doesn't fire even if it was registered before all other script or link tags in html. And if you attach debugger, 'network' tab just shows 'cancelled' status on those resources. The same if you try to load something from cloudfront.net using xhr request.

sberic
Legend
January 22, 2018

[For those interested, this question appears to also have been asked on the CEP-Resources GitHub Issues list.]

Trevor:
Legend
January 22, 2018

Try looking into ssl-root-cas

There are other less secure methods if you need (i.e. can't get the above to work or don't care about the security)