170355 - Client certificate authentication

Status: RESOLVED FIXED

(Camino Graveyard :: General, defect, P2)

Description

[ahp+mozilla]

I would like to see client certificate authentication implemented.  Currently
(as far as I know) Mozilla is the only browser that supports this under OS X
(OmniWeb and IE don't support it).

Comment 1

[Greg K.]

[e-mail], can you provide a URL or other example that
demonstrates that this works in Mozilla but not in Chimera?

Comment 2

[ahp+mozilla]

https://www.hilander.com/ssltest

I've got it setup with all the major CAs, so any client-side cert you have
should work just fine.

Comment 3

[Simon Fraser [no longer active]]

Confirming.

Comment 4

[sairuh (rarely reading bugmail)]

*** Bug 180817 has been marked as a duplicate of this bug. ***

Comment 5

[sairuh (rarely reading bugmail)]

it'd be good to have this in the next release. for example, there are internal
sites at work which require certs. it'd be good for camino to deal with 'em. :).

Comment 6

[Mike Pinkerton (not reading bugmail)]

fyi, there is a workaround in that you can copy your certs from your moz profile
into your camino profile and they work as expected (since camino is mozilla).

Comment 7

[ahp+mozilla]

I have tried doing this workaround (copying the Security directory) but it still
does not work.

Comment 8

[Jean-Marc Desperrier]

Copying a profile wih the required certificate is not enough.

Probably because the crypto database is initially locked, and the user never has
had the opportunity to enter the password.

Comment 9

[Martin Girschick]

(In reply to comment #8)
> Copying a profile wih the required certificate is not enough.

I copied the appropriate files from my Mozilla settings and when I enter a site
which requests my certificate the password dialog shows up just fine.

Comment 10

[Simon Fraser [no longer active]]

Patch in bug 151656 fixes this.

Comment 11

[Simon Fraser [no longer active]]

Fixed by the checkin for bug 151656.

Comment 12

[Simon Fraser [no longer active]]

Rilly.