300375 - TLS/SSL - Firefox should prompt to select client cerficate once per site

Status: RESOLVED DUPLICATE of bug 149673

(Firefox :: Security, defect)

Description

[Alon Bar-Lev]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050527 Firefox/1.0+
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050527 Firefox/1.0+

If I select Tools/Options/Advanced/Certificates/when web site requires a
certificate - ask every time

I expect that it will prompt me to select a client certificate - and it does.

But... When the TLS/SSL session is disconnected and I press refresh, it prompt
me again to select a client certificate... even if the URL is the same.


Reproducible: Always

Steps to Reproduce:
1. Have more than one certificate on machine.
2. Tools/Options/Advanced/Certificates/when web site requires a certificate -
ask every time
3. Navigate to a site requiring client certificate.
4. Select a client certificate at the prompt.
5. Wait for a while... TLS/SSL session should be disconnected.
6. Press refresh.
7. You should be prompt again for a certificate... This Should not happen.

Actual Results:  
You are prompted for a client certificate more than once for a specific site.

Expected Results:  
You should be prompted only once for client certificate per site (site:port).

Comment 1

[zug_treno]

Related to Core bug 149673?

Comment 2

[Alon Bar-Lev]

Yes...
I should have found it in my search...

*** This bug has been marked as a duplicate of 149673 ***

Comment 3

[Nelson Bolyard (seldom reads bugmail)]

"ask every time" does just what it says.  That's not a bug.
Apparently you want a new feature, "ask once per site."

Comment 4

[Alon Bar-Lev]

The "Ask every time" tells firefox to ask for certificate and not select it
automaticaly using predefined rules... Or submit it to the web site without
prompting the user...

There is no sense in asking the same certificate over and over after the user
selects one... It is some what like authentication... When you enter
user/password to a web site you are never prompted for it again...