1966033 - unexpected client auth certificate request dialogs on android

Status: RESOLVED FIXED

(Core :: Security: PSM, defect, P1)

Description

[Tom Schuster]

Someone on reddit reported that Firefox is now requesting a client certificate on multiple websites. The certificate name is "FindMyPhone". I doubt this is supposed to be used as a normal client certificate for websites.

Comment 1

[Tom Schuster]

I think there are some more other reports like https://www.reddit.com/r/firefox/comments/1kekg2o/need_help_after_update_on_mobile/.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Set release status flags based on info from the regressing bug 1813930

:keeler, since you are the author of the regressor, bug 1813930, could you take a look? Also, could you set the severity field?

For more information, please visit BugBot documentation.

Comment 3

[Dana Keeler (she/her) [:keeler]]

Attachment: Bug 1966033 - pass the list of acceptable issuers through to the android API for client auth certs r?jschanck

Comment 4

[Lazy Monkey]

another report here:

https://www.reddit.com/r/firefox/comments/1klyz0d/android_firefox_keeps_asking_me_to_select/

Comment 5

[Donal Meehan [:dmeehan]]

This is the last week of Nightly for Fx140 before it goes to Beta.

:dana, do you think you'll land a fix for Fx140 before it goes to beta?

Comment 6

[Dana Keeler (she/her) [:keeler]]

I'm certainly going to try - I'll ping the remaining reviewers today.

Comment 7

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/2c0ecc169e46
pass the list of acceptable issuers through to the android API for client auth certs r=jschanck,geckoview-reviewers,geckoview-api-reviewers,ohall,owlish

Comment 8

[Sandor Molnar[:smolnar]]

https://hg.mozilla.org/mozilla-central/rev/2c0ecc169e46

Comment 9

[BugBot [:suhaib / :marco/ :calixte]]

The patch landed in nightly and beta is affected.
:keeler, is this bug important enough to require an uplift?

• If yes, please nominate the patch for beta approval.
  • See https://wiki.mozilla.org/Release_Management/Requesting_an_Uplift for documentation on how to request an uplift.
• If no, please set status-firefox139 to wontfix.

For more information, please visit BugBot documentation.

Comment 10

[Dana Keeler (she/her) [:keeler]]

Well, I would say yes, but this didn't make it in time to get into a beta (we release next week, right?), so I think it'll just have to ride the trains.