[Webkit-unassigned] [Bug 232809] New: Safari 15.0/15.1 keeps asking for client certificate

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=232809

            Bug ID: 232809
           Summary: Safari 15.0/15.1 keeps asking for client certificate
           Product: WebKit
           Version: Safari 15
          Hardware: Mac (Intel)
                OS: macOS 11
            Status: NEW
          Severity: Major
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: Seppo.Laaksonen at mydbr.com

When accessing a site that requires a client certificate, Safari 15.0/15.1 keeps asking for the certificate over and over again and creates an entry for each URL to Keychain. The previous Safari versions cached the certificate and asked the vertificate only once when you had https://server.domain.com/ identity preference in the Keychain. 

The continuous asking for the certificate and the numerous entries in Keychain makes Safari 15.0/15.1 unusable for sites that require a client certificate.

How to produce the behavior:

- Set up a web server that requires client certificate. Apache config:
        SSLEngine on
        SSLVerifyClient require
        SSLVerifyDepth 1

        SSLCertificateFile    /etc/ssl/private/internal_server.crt
        SSLCertificateKeyFile /etc/ssl/private/internal_server.key

        SSLCACertificateFile /etc/ssl/private/internal_ca.crt
        SSLCertificateChainFile /etc/ssl/private/internal_ca.crt
- Access different URL's in the server

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20211108/176e9ab3/attachment-0001.htm>