Unable to select client certificate when authentificating

Hello everybody,

I have ran into the following problem, while trying to authentificate myself on a secure website using a client certificate with sslV3 : Safari doesn't let me choose a certificate and instead pick one for me.
This behaviour is similar to that of Mozilla with default options. However there is an option with Mozilla that allows me to change this behaviour and ask me to select one certificate whenever the browser receives an authentification request.
The issue here is that I have to use many certificates and can only use one due to this limitation.

So here are my questions :
1) Is there a way to make Safari prompt me to select a certificate? (hidden option?)
2) Is this specific to Safari 1.2/1.3 or do the new 2.0 version has a different behaviour?

Thanks in advance to those kind enough to enlighten me 🙂
Regards,

Gilles

Posted on Aug 29, 2005 10:28 AM

Reply
8 replies

Sep 7, 2005 8:50 AM in response to Gilles Seguin

Gilles,

I am also in need of the ability to choose from a list of client certs for a particular ssl based web app.

I don't have any helpful hints for Safari as I have not been able to figure out any way to get any version of Safari to prompt for selection from a list of certs.

I have ended up having to use Firefox and export the certs that I need using Keychain Access and then importing them into Firefox's own certificate store. I export them as PKCS#12 formatted certs as that is all that FireFox can handle. I then set FireFox to ask every time when it comes across a web site that needs a certificate.

Sep 28, 2005 8:01 AM in response to David B Brown 2

Hi David,

In my case, I'm able to see which certificate Safari is choosing but only when the authentification is successfull : in that case the application displays the information of the connected user so it is possible to determine which certificate was presented to the server.

From my experience, once Safari has choosen a certifcate for a given site, the only way to change this behaviour is to remove the certificate from the keystore :/
Hence if you revoke a certificate you have to remove it from the keystore in order for Safari to use the new one...

Regards,
Gilles

Oct 14, 2005 9:47 AM in response to Gilles Seguin

Hi thanks for the reply. The problem I had was knowing which one was being used, accorind to Keychain I didn't have any invalid certificates, but which ever one was being chosen was the right one. I worked round this use by creating a new user account and only loading the certificate that I new was the correct one into the keychain of this new account.

Still it would be much better if we could have behaviour more like Firefox where you can configure things to give you a choice

Cheers

David

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Unable to select client certificate when authentificating

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.