428744 - SSL using client certificates, selected certificate is not stored for session

Status: RESOLVED DUPLICATE of bug 395399

(Core :: Security: PSM, defect)

Description

[Keenan]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b5) Gecko/2008032620 Firefox/3.0b5
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b5) Gecko/2008032620 Firefox/3.0b5

When browsing to a site that requests a client cert, Firefox prompts the user to select the certificate they want to send (even if only one is installed). The selected certificate isn't saved for the session, so the user receives the same prompt many times for the same page, and on any subsequent pageloads at the same site.

This seems to be a regression from an earlier Firefox 3 build when I was not prompted.

Unfortunately I can't find an example that exhibits this issue without requiring a real login.

Reproducible: Always

Steps to Reproduce:
1. Install a client certificate
2. Navigate to site requesting client certificate
Actual Results:  
Prompt to select client cert. to send appears. After selecting the desired cert and clicking okay, it reappears again several times before the page finishes loading.

Expected Results:  
Prompt to select client cert. to send appears. Once a cert has been selected, the preference is stored in the session for that URL, much the same way HTTP passwords are stored.