Closed
Bug 1177386
Opened 9 years ago
Closed 9 years ago
On iOS9 every HTTPS site results in a basic auth dialog being shown
Categories
(Firefox for iOS :: General, defect)
Tracking
()
RESOLVED
FIXED
| Tracking | Status | |
|---|---|---|
| fxios | + | --- |
People
(Reporter: st3fan, Unassigned)
References
Details
(Whiteboard: noteworthy)
Attachments
(1 file)
On iOS9 every HTTPS site results in a basic auth dialog being shown. Is it possible that we now get a callback that gives us an opportunity to inspect the SSL certificate? Maybe we are interpreting that as a request for basic auth?
|
Reporter | |
Comment 1•9 years ago
|
||
This patch inverts the comparison on `protectionSpace.authenticationMethod` so that we better check for *Basic* and *Digest*. I think this fails on iOS 9 because they now actually trigger `NSURLAuthenticationMethodServerTrust`. (Which we can then use to verify the SSL chain!)
Attachment #8626093 -
Flags: review?(wjohnston)
|
||
Updated•9 years ago
|
Attachment #8626093 -
Flags: review?(wjohnston) → review+
|
|
Reporter | |
Comment 2•9 years ago
|
||
Fixed. But also needed the following followup fix: https://github.com/mozilla/firefox-ios/commit/d71e56e8dc801d60a9fd50d138150d1c4e4e398a Which calls the completionHandler with NSURLSessionAuthChallengeDisposition.PerformDefaultHandling if we don't know how to handle it. (Ie, when it is not Basic or Digest auth)
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
|
|
||
Updated•9 years ago
|
|
|
Reporter | |
Updated•9 years ago
|
Whiteboard: noteworthy
You need to log in
before you can comment on or make changes to this bug.
Description
•