search

mozilla-mobile / firefox-ios

Firefox for iOS
Mozilla Public License 2.0
12.1k stars 2.88k forks source link

User TLS certificates are not used for site authentication #20152

Open kloberle opened 2 months ago

kloberle commented 2 months ago

Steps to reproduce

  1. Establish an iOS configuration profile based on a current user certificate
  2. Attempt to access a secured https site -- that authenticates by certificate -- for which the selected user certificate (from the iOS configuration profile) is valid.

Expected behavior

The browser prompts for which certificate to use. Upon certificate acceptance, normal site viewing and navigation can progress.

Actual behavior

Firefox for iOS displays an NS URL Error Domain message.

Device & build information

Notes

TLS certificate authentication works as expected for both Firefox for Windows and Safari iOS. Firefox iOS seems to neither:

From Safari: image

Same URL as above but from Firefox iOS: image

┆Issue is synchronized with this Jira Task

data-sync-user commented 2 months ago

➤ Norberto Andres Furlan commented:

Hi! Thanks for reporting this. Currently this in not supported on Firefox iOS.

kloberle commented 2 months ago

➤ Norberto Andres Furlan commented:

Hi! Thanks for reporting this. Currently this in not supported on Firefox iOS.

So instead should this be handled as an feature request? Is there a method to shift this to Mozilla Connect, or should I do so manually?

Thanks.

kloberle commented 2 months ago

Moved to feature request in Mozilla Connect.

DanBurkhardt commented 3 weeks ago

um, question though: if Firefox isn't using the iOS trust store... then what IS it using instead?

kloberle commented 3 weeks ago

um, question though: if Firefox isn't using the iOS trust store... then what IS it using instead?

Firefox on iOS certainly can access both the Firefox password store and the iCloud keychain when necessary...for username&password credentials.

The issue discussed in this ticket is wrt Firefox for iOS being unable to employ user certificates (saved in the iOS Configuration Profile) for site authentication.