1592111 - add pref to load osclientcerts module

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement, P1)

Description

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Now that the osclientcerts module has landed (at least for Windows), it would be nice to have an easy way users could load it without having to go through the device manager. An about:config pref should do nicely.

Comment 1

[Mike Kaply [:mkaply]]

We'll want to expose this via policy as well.

Comment 2

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Attachment: bug 1592111 - add the preference "security.osclientcerts.autoload" to control auto-loading the OS client certs module r?kjacobs

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/5127c3b71684
add the preference "security.osclientcerts.autoload" to control auto-loading the OS client certs module r=jcj

Comment 4

[Daniel Varga [:dvarga]]

https://hg.mozilla.org/mozilla-central/rev/5127c3b71684

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/comm-central/rev/bd0fd75f4438
Port bug 1592111 - s/BlockUntilLoadableRootsLoaded/BlockUntilLoadableCertsLoaded/. rs=bustage-fix

Comment 6

[Dana Keeler (she/her) (use needinfo) [:keeler]]

We have a test for this, so we don't need QA.

Comment 7

[Julien Cristau [:jcristau]]

Should we include this in the enterprise section of the 72 release notes? Can you suggest wording if yes?

Comment 8

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Sure - maybe something like:

Experimental support for using client certificates from the OS certificate store can be enabled by setting the preference "security.osclientcerts.autoload" to true (Windows only).

Comment 9

[Julien Cristau [:jcristau]]

comment 8.