Open Bug 696976 Opened 8 years ago Updated 3 months ago

Client certificate UI blocks the SSL thread / socket transport thread

Categories

(Core :: Security: PSM, defect, P3)

defect

Tracking

()

People

(Reporter: briansmith, Unassigned)

References

Details

(Whiteboard: [psm-backlog])

We present the client authentication UI and wait for the user to dismiss it synchronously in our client auth data hook (nsNSS_SSLGetClientAuthData in nsNSSIOLayer.cpp). Instead, we should dispatch an event to launch the UI and then return SECWouldBlock. libssl will wait for us to restart the handshake after the user has chosen his/her certificate.

This depends on one or more bugs in libssl being fixed.
You need to log in before you can comment on or make changes to this bug.