Optionally disable cert verification for dev-server

README.md

@@ -190,7 +190,7 @@ public void ConfigureServices(IServiceCollection services)
             options.ManifestFileName = "asset-manifest.json";
             options.Host = "192.167.1.100";
             options.Port = 8081;
-            opts.Scheme = "https";
+            options.Scheme = "https";
         });
     // ...
 }

samples/WebApp/webpack.dev.js

@@ -1,4 +1,4 @@
-const path = require('path');
+const path = require('path');
 const autoprefixer = require('autoprefixer');
 const webpack = require('webpack');
 const ExtractTextPlugin = require('extract-text-webpack-plugin');
@@ -19,6 +19,7 @@ const config = {
   },
   devServer: {
     port: 8080,
+    https: false,
     contentBase: false,
     compress: true,
     quiet: false,

src/Webpack.AspNetCore/DevServer/DevServerOptions.cs

@@ -41,5 +41,10 @@ public DevServerOptions()
         /// Scheme. Default: http
         /// </summary>
         public string Scheme { get; set; } = "http";
+
+        /// <summary>
+        /// Toggle server certificate validation if <see cref="Scheme"/> is 'https'
+        /// </summary>
+        public bool ValidateServerCert { get; set; } = true;
     }
 }

src/Webpack.AspNetCore/DevServer/Internal/DevServerBackchannelFactory.cs

@@ -1,4 +1,4 @@
-using System;
+using System;
 using System.Net.Http;
 
 namespace Webpack.AspNetCore.DevServer.Internal
@@ -16,9 +16,14 @@ public DevServerBackchannelFactory(DevServerBackchannelFactoryContext context)
             this.context = context ?? throw new ArgumentNullException(nameof(context));
         }
 
-        public HttpClient Create(Uri baseAddress)
+        public HttpClient Create(Uri baseAddress, bool validateCert)
         {
             var handler = context.GetMessageHandler();
+
+            // We don't always want to validate when connecting locally. This is only for dev anyways, right?
+            if (!validateCert)
+                handler.ServerCertificateCustomValidationCallback = (httpRequestMessage, cert, certChain, policyErrors) => true;
+
             return new HttpClient(handler, disposeHandler: false)
             {
                 BaseAddress = baseAddress

src/Webpack.AspNetCore/DevServer/Internal/DevServerBackchannelFactoryContext.cs

@@ -1,4 +1,4 @@
-using System.Net.Http;
+using System.Net.Http;
 
 namespace Webpack.AspNetCore.DevServer.Internal
 {
@@ -20,10 +20,10 @@ public DevServerBackchannelFactoryContext()
             {
                 AllowAutoRedirect = false,
                 UseCookies = false,
-                UseProxy = false
+                UseProxy = false,
             };
         }
 
-        public HttpMessageHandler GetMessageHandler() => handlerInstance;
+        public HttpClientHandler GetMessageHandler() => handlerInstance;
     }
 }

src/Webpack.AspNetCore/DevServer/Internal/DevServerManifestReader.cs

@@ -1,4 +1,4 @@
-using Newtonsoft.Json;
+using Newtonsoft.Json;
 using System;
 using System.Collections.Generic;
 using System.Net.Http;
@@ -37,7 +37,7 @@ public DevServerManifestReader(DevServerContext context, DevServerBackchannelFac
                 throw new ArgumentNullException(nameof(backchannelFactory));
             }
 
-            backchannel = backchannelFactory.Create(context.ManifestUri);
+            backchannel = backchannelFactory.Create(context.ManifestUri, context.Options.ValidateServerCert);
             backchannel.DefaultRequestHeaders.Add("Connection", "keep-alive");
         }
 

src/Webpack.AspNetCore/DevServer/Internal/DevServerReverseProxyMiddleware.cs

@@ -1,4 +1,4 @@
-using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Http;
 using System;
 using System.Linq;
 using System.Net.Http;
@@ -33,7 +33,7 @@ public DevServerReverseProxyMiddleware(
 
             this.next = next ?? throw new ArgumentNullException(nameof(next));
             this.devServerHost = context.DevServerHost;
-            this.backchannel = backchannelFactory.Create(context.DevServerUri);
+            this.backchannel = backchannelFactory.Create(context.DevServerUri, context.Options.ValidateServerCert);
         }
 
         public async Task Invoke(HttpContext context, DevServerAssetPathRepository repository)