1559916 - Client certificate prompt not working on startup

Status: RESOLVED INCOMPLETE

(Core :: Security: PSM, defect, P3)

Description

[anderen2]

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:67.0) Gecko/20100101 Firefox/67.0

Steps to reproduce:

Using a NGINX webserver with "ssl_verify_client optional;" and Firefox 67, issue was also present in earlier versions.

Actual results:

When pinning or restoring tabs from the previous session that require a client cert at startup, the dialog for selecting a certificate appears but does not seem to work.

The page that required the client certificate will not receive it, and there is no way to re-trigger the dialog. The only way to get Firefox to present the client certificate again is to close and/or unpin the tab, restart the browser and then navigating to the page after the browser has finished loading the pinned/previous tabs.

This may be related to using a master password at the same time, as both dialogs appear when starting the browser, however due to locked focus I'm unable to enter the master password before I accept the client certificate prompt.

Expected results:

The prompt for selecting a client certificate should also work for initial tabs, either pinned or restored from a previous session.

Also, it would be nice to have a way to re-trigger the dialog in case the wrong option was selected, without restarting Firefox.

Comment 1

[Liviu Seplecan]

Hi @anderen2, I've tried to test the issue but I don't have the environment to do that, it's a restricted network. What can I do for now is setting a component(if isn't the proper one please fell free to change it), then maybe someone from dev's team could give us a hand.
Additionally, could you please test if the issue persists on the Nighlty build, you can grab it from here: https://nightly.mozilla.org/
Thanks.