[Gtk4] Support self-signed certificate in webkit

Direct port of the same dialog to approve it or system property as on
Gtk 3.

Author: akurtakov

bundles/org.eclipse.swt/Eclipse SWT WebKit/gtk/library/webkitgtk.c

@@ -1549,6 +1549,30 @@ JNIEXPORT jlong JNICALL WebKitGTK_NATIVE(webkit_1navigation_1policy_1decision_1g
 }
 #endif
 
+#ifndef NO_webkit_1network_1session_1allow_1tls_1certificate_1for_1host
+JNIEXPORT jlong JNICALL WebKitGTK_NATIVE(webkit_1network_1session_1allow_1tls_1certificate_1for_1host)
+	(JNIEnv *env, jclass that, jlong arg0, jlong arg1, jbyteArray arg2)
+{
+	jbyte *lparg2=NULL;
+	jlong rc = 0;
+	WebKitGTK_NATIVE_ENTER(env, that, webkit_1network_1session_1allow_1tls_1certificate_1for_1host_FUNC);
+	if (arg2) if ((lparg2 = (*env)->GetByteArrayElements(env, arg2, NULL)) == NULL) goto fail;
+/*
+	rc = (jlong)webkit_network_session_allow_tls_certificate_for_host(arg0, arg1, lparg2);
+*/
+	{
+		WebKitGTK_LOAD_FUNCTION(fp, webkit_network_session_allow_tls_certificate_for_host)
+		if (fp) {
+			rc = (jlong)((jlong (CALLING_CONVENTION*)(jlong, jlong, jbyte *))fp)(arg0, arg1, lparg2);
+		}
+	}
+fail:
+	if (arg2 && lparg2) (*env)->ReleaseByteArrayElements(env, arg2, lparg2, 0);
+	WebKitGTK_NATIVE_EXIT(env, that, webkit_1network_1session_1allow_1tls_1certificate_1for_1host_FUNC);
+	return rc;
+}
+#endif
+
 #ifndef NO_webkit_1network_1session_1get_1cookie_1manager
 JNIEXPORT jlong JNICALL WebKitGTK_NATIVE(webkit_1network_1session_1get_1cookie_1manager)
 	(JNIEnv *env, jclass that, jlong arg0)
@@ -1609,6 +1633,24 @@ JNIEXPORT jlong JNICALL WebKitGTK_NATIVE(webkit_1network_1session_1get_1website_
 }
 #endif
 
+#ifndef NO_webkit_1network_1session_1set_1tls_1errors_1policy
+JNIEXPORT void JNICALL WebKitGTK_NATIVE(webkit_1network_1session_1set_1tls_1errors_1policy)
+	(JNIEnv *env, jclass that, jlong arg0, jint arg1)
+{
+	WebKitGTK_NATIVE_ENTER(env, that, webkit_1network_1session_1set_1tls_1errors_1policy_FUNC);
+/*
+	webkit_network_session_set_tls_errors_policy(arg0, arg1);
+*/
+	{
+		WebKitGTK_LOAD_FUNCTION(fp, webkit_network_session_set_tls_errors_policy)
+		if (fp) {
+			((void (CALLING_CONVENTION*)(jlong, jint))fp)(arg0, arg1);
+		}
+	}
+	WebKitGTK_NATIVE_EXIT(env, that, webkit_1network_1session_1set_1tls_1errors_1policy_FUNC);
+}
+#endif
+
 #ifndef NO_webkit_1policy_1decision_1download
 JNIEXPORT void JNICALL WebKitGTK_NATIVE(webkit_1policy_1decision_1download)
 	(JNIEnv *env, jclass that, jlong arg0)

bundles/org.eclipse.swt/Eclipse SWT WebKit/gtk/library/webkitgtk_stats.h

@@ -98,9 +98,11 @@ typedef enum {
 	webkit_1navigation_1action_1get_1request_FUNC,
 	webkit_1navigation_1policy_1decision_1get_1navigation_1action_FUNC,
 	webkit_1navigation_1policy_1decision_1get_1request_FUNC,
+	webkit_1network_1session_1allow_1tls_1certificate_1for_1host_FUNC,
 	webkit_1network_1session_1get_1cookie_1manager_FUNC,
 	webkit_1network_1session_1get_1default_FUNC,
 	webkit_1network_1session_1get_1website_1data_1manager_FUNC,
+	webkit_1network_1session_1set_1tls_1errors_1policy_FUNC,
 	webkit_1policy_1decision_1download_FUNC,
 	webkit_1policy_1decision_1ignore_FUNC,
 	webkit_1response_1policy_1decision_1get_1request_FUNC,

bundles/org.eclipse.swt/Eclipse SWT WebKit/gtk/org/eclipse/swt/browser/WebKit.java

@@ -708,8 +708,13 @@ public void create (Composite parent, int style) {
 		OS.g_object_ref(webView);
 	}
 	if (ignoreTls) {
-		WebKitGTK.webkit_web_context_set_tls_errors_policy(WebKitGTK.webkit_web_view_get_context(webView),
-				WebKitGTK.WEBKIT_TLS_ERRORS_POLICY_IGNORE);
+		if (GTK.GTK4) {
+			WebKitGTK.webkit_network_session_set_tls_errors_policy(WebKitGTK.webkit_network_session_get_default(),
+					WebKitGTK.WEBKIT_TLS_ERRORS_POLICY_IGNORE);
+		} else {
+			WebKitGTK.webkit_web_context_set_tls_errors_policy(WebKitGTK.webkit_web_view_get_context(webView),
+					WebKitGTK.WEBKIT_TLS_ERRORS_POLICY_IGNORE);
+		}
 		System.out.println("***WARNING: WebKitGTK is configured to ignore TLS errors via -Dorg.eclipse.swt.internal.webkitgtk.ignoretlserrors=true .");
 		System.out.println("***WARNING: Please use for development purposes only!");
 	}
@@ -2534,10 +2539,16 @@ long webkit_load_changed (long web_view, int status, long user_data) {
 				prompt.setMessage(message);
 				int result = prompt.open();
 				if (result == SWT.YES) {
-					long webkitcontext = WebKitGTK.webkit_web_view_get_context(web_view);
 					if (javaHost != null) {
 						byte [] host = Converter.javaStringToCString(javaHost);
-						WebKitGTK.webkit_web_context_allow_tls_certificate_for_host(webkitcontext, tlsErrorCertificate, host);
+						if (GTK.GTK4) {
+							WebKitGTK.webkit_network_session_allow_tls_certificate_for_host(
+									WebKitGTK.webkit_network_session_get_default(), tlsErrorCertificate, host);
+						} else {
+							long webkitcontext = WebKitGTK.webkit_web_view_get_context(web_view);
+							WebKitGTK.webkit_web_context_allow_tls_certificate_for_host(webkitcontext,
+									tlsErrorCertificate, host);
+						}
 						WebKitGTK.webkit_web_view_reload (web_view);
 					} else {
 						System.err.println("***ERROR: Unable to parse host from URI!");

bundles/org.eclipse.swt/Eclipse SWT WebKit/gtk/org/eclipse/swt/internal/webkit/WebKitGTK.java

@@ -1,5 +1,5 @@
 /*******************************************************************************
- * Copyright (c) 2000, 2025 IBM Corporation and others. All rights reserved.
+ * Copyright (c) 2000, 2026 IBM Corporation and others. All rights reserved.
  * The contents of this file are made available under the terms
  * of the GNU Lesser General Public License (LGPL) Version 2.1 that
  * accompanies this distribution (lgpl-v21.txt).  The LGPL is also
@@ -370,6 +370,9 @@ public class WebKitGTK extends C {
 /** @method flags=dynamic */
 public static final native long webkit_web_context_get_default();
 
+/** @method flags=dynamic */
+public static final native long webkit_network_session_allow_tls_certificate_for_host(long session, long certificate, byte[] constGCharHost);
+
 /** @method flags=dynamic */
 public static final native long webkit_network_session_get_default();
 
@@ -379,6 +382,9 @@ public class WebKitGTK extends C {
 /** @method flags=dynamic */
 public static final native long webkit_network_session_get_website_data_manager(long session);
 
+/** @method flags=dynamic */
+public static final native void webkit_network_session_set_tls_errors_policy(long session, int policy);
+
 /** @method flags=dynamic */
 public static final native long webkit_web_context_get_cookie_manager(long context);