Implement API for querying SSL status and certificate information and signalling SSL errors to the embedder

[Chris Coulson]

The webview should expose an API for querying SSL status and certificate information and signalling SSL errors to the embedder. This is required in order to present something other than a blank page when we encounter verification issues

[Jamie Strandboge (jdstrand)]

With the change to apparmor-easyprof-ubuntu for bug 1260048, you'll need to fix that along with this for confined apps to take advantage of this feature.

[Jean-Baptiste Lallement (jibel)]

This is critical for major wabsites like youtube where the default is https, then you cannot play video because the content is insecure, for example:

TEST CASE:
1. Launch the browser
2. Go to google.com
3. Type youtube
4. The 1rst link on the page should be 'https://m.youtube.com/'
5. Follow this link to youtube and try to play a video

ACTUAL RESULT
It doesn't play because it contains http and https contents.

[David Planella (dpm)]

Somehow related, track previews on 7digital's mobile site cannot be played -admittedly, that's a bug on their side.

The browser's logs say: "[blocked] The page at 'https://m.7digital.com/GB/releases/3763648?lang=en&partner=983' was loaded over HTTPS, but displayed insecure content from 'http://previews.7digital.com/clip/[…]': this content should also be loaded over HTTPS."

[Launchpad Janitor (janitor)]

This bug was fixed in the package webbrowser-app - 0.23+14.10.20140922-0ubuntu1

---------------
webbrowser-app (0.23+14.10.20140922-0ubuntu1) utopic; urgency=low

  [ Michael Sheldon ]
  * Display padlock when viewing pages over HTTPS. Provide certificate
    details when padlock is clicked. Display error pages when invalid
    SSL certificates are presented and allow users to override these
    warnings. . Display warning symbol when insecure content is loaded
    over HTTPS (currently incorrect icon, should be updated when dialog-
    warning-symbol lands in ubuntu-theme). (LP: #1214034)
 -- Ubuntu daily release <email address hidden> Mon, 22 Sep 2014 21:13:10 +0000