1074830 - Provide SSL client certificate logout possibility

Status: NEW

(Firefox :: Security, defect)

Description

[Thomas Peters]

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0 SeaMonkey/2.29.1
Build ID: 20140923221838

Steps to reproduce:

Log in to a website that uses SSL client certificates for authentication, e.g. secure.cacert.org.


Actual results:

There is no way to log out. SeaMonkey remembers that it has logged in with a certificate until you close the browser.


Expected results:

There should be a possibility to "forget" the certificate authentication, similar to "Tools -> Password Manager -> Log Out" for HTTP basic authentication. Interestingly Firefox doesn't seem to have that menu item.

Comment 1

[Freek Dijkstra]

I can confirm this bug (I was about to create a similar report). Other have run into it as well: http://forums.mozillazine.org/viewtopic.php?f=38&t=2744753

This bug may be a subset of the changes proposed in #1018260.

Comment 2

[Dana Keeler (she/her) (use needinfo) [:keeler]]

We may need to make changes in PSM to support this, but this is more of a front-end feature.

Comment 3

[Kevin]

I'm having the same issue to logout a user with a certificate-based authentication.
There is a solution to solve that now?