WebRTC Certificate during DTLS

manpreet Best Answer 2 years ago

We are trying to make more secure a WebRTC gateway. To ensure this, we decide to validate incoming WebRTC certificate via OCSP/CRL, but when we took a Wireshark capture, we realized that WebRTC using a self-signed certificate during DTLS as you can see from the link at below;

WebRTC Self-Signed Image

Because of self-signed certificate, there is no way to use OCSP/CRL. So is there any way to import and use CA-signed certificate for WebRTC engine?

manpreet 2 years ago

WebRTC has generateCertificate() static function where you can specify the algorithm for signing certificates.

From the link above:

RTCPeerConnection.generateCertificate({
    name: 'RSASSA-PKCS1-v1_5',
    hash: 'SHA-256',
    modulusLength: 2048,
    publicExponent: new Uint8Array([1, 0, 1])
}).then(function(cert) {
    var pc = new RTCPeerConnection({certificates: [cert]});
});