[Webkit-unassigned] [Bug 232809] New: Safari 15.0/15.1 keeps asking for client certificate

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Nov 8 00:31:33 PST 2021


            Bug ID: 232809
           Summary: Safari 15.0/15.1 keeps asking for client certificate
           Product: WebKit
           Version: Safari 15
          Hardware: Mac (Intel)
                OS: macOS 11
            Status: NEW
          Severity: Major
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: Seppo.Laaksonen at mydbr.com

When accessing a site that requires a client certificate, Safari 15.0/15.1 keeps asking for the certificate over and over again and creates an entry for each URL to Keychain. The previous Safari versions cached the certificate and asked the vertificate only once when you had https://server.domain.com/ identity preference in the Keychain. 

The continuous asking for the certificate and the numerous entries in Keychain makes Safari 15.0/15.1 unusable for sites that require a client certificate.

How to produce the behavior:

- Set up a web server that requires client certificate. Apache config:
        SSLEngine on
        SSLVerifyClient require
        SSLVerifyDepth 1

        SSLCertificateFile    /etc/ssl/private/internal_server.crt
        SSLCertificateKeyFile /etc/ssl/private/internal_server.key

        SSLCACertificateFile /etc/ssl/private/internal_ca.crt
        SSLCertificateChainFile /etc/ssl/private/internal_ca.crt
- Access different URL's in the server

You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20211108/176e9ab3/attachment-0001.htm>

More information about the webkit-unassigned mailing list