1265522 - firefox fails mutual authentication

Status: RESOLVED INCOMPLETE

(Core :: Security: PSM, defect)

Description

[marcus.kappi]

Attachment: clientcert-firefoxbug.png

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Firefox/45.0
Build ID: 20160407164938

Steps to reproduce:

1. Tested server authentication works correctly when using https and a certificate bought from comodo.
2. Tested adding client server authentication after installing client certificate on many different environments.



Actual results:

1. Works fine on all browsers and os we tested.
2. Works fine on safari, ios-safari, chrome, ie-11 on both mac and windows
but on both os, firefox does not connect and suggests that the site does not support encryption and that the site leaves no info about owner, whcih both is incorrect.


Expected results:

The user should be able to reach the site then login and do their work also using
firefox. So at this point we can not use firefox.

Comment 1

[Loic]

Do you have the URL of the website if it's public?

Comment 2

[marcus.kappi]

The site is for specific use and it does have client-authentication on now.
https://www.capitalmedtech.com

Comment 3

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

When you connect to that site in Firefox, does a dialog come up that allows you to choose a client certificate?
Can you attach a packet trace of a successful connection in another browser vs. an unsuccessful connection in Firefox?
Thanks.