Closed Bug 300375 Opened 20 years ago Closed 20 years ago

TLS/SSL - Firefox should prompt to select client cerficate once per site

Categories

(Firefox :: Security, defect)

Product:
Firefox
Component:
Security
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 149673

People

(Reporter: alon.barlev, Unassigned)

Details

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050527 Firefox/1.0+ Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050527 Firefox/1.0+ If I select Tools/Options/Advanced/Certificates/when web site requires a certificate - ask every time I expect that it will prompt me to select a client certificate - and it does. But... When the TLS/SSL session is disconnected and I press refresh, it prompt me again to select a client certificate... even if the URL is the same. Reproducible: Always Steps to Reproduce: 1. Have more than one certificate on machine. 2. Tools/Options/Advanced/Certificates/when web site requires a certificate - ask every time 3. Navigate to a site requiring client certificate. 4. Select a client certificate at the prompt. 5. Wait for a while... TLS/SSL session should be disconnected. 6. Press refresh. 7. You should be prompt again for a certificate... This Should not happen. Actual Results: You are prompted for a client certificate more than once for a specific site. Expected Results: You should be prompted only once for client certificate per site (site:port).
Related to Core bug 149673?
Yes... I should have found it in my search... *** This bug has been marked as a duplicate of 149673 ***
Status: UNCONFIRMED → RESOLVED
Closed: 20 years ago
Resolution: --- → DUPLICATE
"ask every time" does just what it says. That's not a bug. Apparently you want a new feature, "ask once per site."
The "Ask every time" tells firefox to ask for certificate and not select it automaticaly using predefined rules... Or submit it to the web site without prompting the user... There is no sense in asking the same certificate over and over after the user selects one... It is some what like authentication... When you enter user/password to a web site you are never prompted for it again...
You need to log in before you can comment on or make changes to this bug.