Cyberduck Mountain Duck CLI

Opened on Apr 7, 2011 at 9:54:14 PM

Closed on May 30, 2014 at 10:00:40 AM

Last modified on Jun 13, 2014 at 1:50:32 PM

#5883 closed enhancement (fixed)

TLS mutual (two-way) certificate authentication

Reported by: Frederik Orellana Owned by: yla
Priority: normal Milestone: 4.5
Component: webdav Version: 4.0.2
Severity: normal Keywords: ssl client certificate, https
Cc: Architecture:
Platform:

Description

This would be a useful feature for the grid community that use certificates to authenticate with HTTPS/WebDav servers (Apache with mod_ssl+mod_dav).

Change History (16)

comment:1 Changed on Apr 8, 2011 at 10:14:53 AM by dkocher

  • Summary changed from support for client certificates to TLS client certificate authentication

I did some initial work on this in r6886.

Last edited on Apr 8, 2011 at 10:15:14 AM by dkocher (previous) (diff)

comment:2 follow-up: Changed on Aug 23, 2011 at 2:44:17 PM by Arne Schmitz De

Did anything happen to support TLS client certs? Would be really awesome to use this for both FTP+SSL and HTTPS/WebDav.

comment:3 in reply to: ↑ 2 Changed on Aug 24, 2011 at 10:13:09 AM by dkocher

Replying to Arne Schmitz De:

Did anything happen to support TLS client certs? Would be really awesome to use this for both FTP+SSL and HTTPS/WebDav.

There are still many quirks to figure out in the client certificate selection.

comment:4 Changed on Nov 7, 2011 at 10:39:24 PM by dkocher

  • Milestone set to 4.2
  • Status changed from new to assigned

comment:5 Changed on Nov 18, 2011 at 9:58:23 AM by dkocher

  • Milestone changed from 4.2 to 4.3

Milestone 4.2 deleted

comment:6 Changed on Jan 30, 2014 at 5:05:45 PM by dkocher

  • Owner changed from dkocher to yla
  • Status changed from assigned to new

comment:7 Changed on May 19, 2014 at 1:11:49 PM by dkocher

More work in r14651.

comment:8 Changed on May 19, 2014 at 2:08:56 PM by dkocher

Client certificate prompt on Windows in r14654.

comment:9 Changed on May 30, 2014 at 9:58:29 AM by dkocher

Make use of MSCAPI native keystore implementation for Windows in r14674.

comment:10 Changed on May 30, 2014 at 9:59:22 AM by dkocher

Make keystore lookup platform dependent in r14660.

comment:11 Changed on May 30, 2014 at 9:59:49 AM by dkocher

Fix alias lookup in r14676.

comment:12 Changed on May 30, 2014 at 10:00:40 AM by dkocher

  • Resolution set to fixed
  • Status changed from new to closed

Added client handshake failure test in r14658.

comment:13 Changed on Jun 2, 2014 at 2:46:31 PM by dkocher

Localization in r14687.

comment:14 Changed on Jun 2, 2014 at 2:47:19 PM by dkocher

Fix to display only certificates matching the distinguished name from the Keychain in r14688.

comment:15 Changed on Jun 3, 2014 at 3:19:16 PM by dkocher

  • Summary changed from TLS client certificate authentication to TLS mutual (two-way) certificate authentication

comment:16 Changed on Jun 13, 2014 at 1:50:32 PM by dkocher

Please update to the latest ​snapshot build available to test this feature.

Note: See TracTickets for help on using tickets.