New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 707787 link

Starred by 40 users

Issue metadata

Status: Assigned
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Chrome , Mac
Pri: 2
Type: Feature


Participants' hotlists:
Hotlist-1


Sign in to add a comment

AutoSelectCertificateForUrls with SUBJECT CN

Reported by erdanzie...@googlemail.com, Apr 3 2017

Issue description

UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36

Steps to reproduce the problem:
1. {"pattern":"https://server.com/customer_code/","filter":{"ISSUER":{"CN":"issuer_code"}}} works fine
2. {"pattern":"https://server.com/customer_code/","filter":{"SUBJECT":{"CN":"customer_code"}}} doesn't work

What is the expected behavior?
It should search and use the client certificate automatically which has SUBJECT CN => customer_code.

What went wrong?
SUBJECT CN seems to be ignored. Only ISSUER CN works.

Did this work before? No 

Chrome version: 57.0.2987.133  Channel: stable
OS Version: OS X 10.12.3
Flash Version: 

We are creating client certificates for all our customer. Because all client certificates has the same ISSUER CN we would like to select a client certificate automatically by using the SUBJECT CN. Maybe SUBJECT isn't the right word?
 
We have 100 client certificates and growing. To select a client certificate automatically would be very helpfull. If this doesn't work i'd like to ask you kindly to implement the option to change the order of the "Select a certificate" table or to implement a "find as you type" feature. 

Thanks you very much,
Marcus
Cc: mzheng@chromium.org blumberg@chromium.org ligim...@chromium.org
Labels: -Type-Bug Type-Feature
Tagging as Feature Request.
Components: Internals>Network>Certificate
Labels: M-59
Status: Untriaged (was: Unconfirmed)
Untriaged it to get addressed further by the respective component owners.
Cc: dskaram@chromium.org
Components: -Internals>Network>Certificate
Removing component; it's an Enterprise feature request.

Comment 5 by sdy@chromium.org, Apr 5 2017

Labels: -OS-Mac
Labels: OS-Chrome OS-Linux OS-Mac OS-Windows
Owner: dskaram@chromium.org
David for prioritization.
Status: Assigned (was: Untriaged)
Labels: -M-59
Its very time consuming, nearly unusable. 

The more certificates we install the longer it takes to find the right one. Specially because we need to do this multiple times per day.

A simple alphabetical sorting would already save so much time.

May i develop this? Please provide me the source files for the "Select a certificate" window. 

Thanks a lot,
Marcus

Comment 10 by jayhlee@google.com, Mar 26 2018

FYI, I have:

https://chromium-review.googlesource.com/#/c/chromium/src/+/980832

out for review that would add ability to match against Subject CN as well as allowing wildcards (* and ?) in the issuer and subject CN fields.
Labels: Hotlist-Enterprise
That's awesome!! I check this asap and get back to you with my feedback.

Thanks a lot, appreciate your effort. 

Comment 13 by evanh...@gmail.com, Apr 19 2018

It appears that solution has been rejected and the referenced bug: https://bugs.chromium.org/p/chromium/issues/detail?id=824940 isn't public. Is there anything you can share on the progress of this issue?
Any progress on this?
Greetings, is there any progress on this? Would greatly appreciate it. Thanks.
I wonder if this will ever be implemented :(
Owner: marcuskoehler@chromium.org
Any progress on this? This is not just enterprise feature, even individual users like me using SSO certificates need this feature.
Labels: Hotlist-Enterprise-Networking
Cc: privard@chromium.org
I requested this over a year now... :-( 
Any update are highly appreciated.
Owner: aghuie@chromium.org
Cc: hendrich@chromium.org
Cc: pmarko@chromium.org
I fixed bug 824940 back in May, it added support to having mutliple filters for the same pattern. Before, any new filter would override the previous filter for that pattern.
It doesn't fix the issue with filtering by Subject CN though.

I'm not too familiar as to why we're not allowing filtering by subject CN yet (+cc: pmarko@) or why exactly the previously mentioned CL (https://chromium-review.googlesource.com/c/chromium/src/+/980832/2) was rejected (+cc: rsleevi@).
@rsleevi: could you elaborate what you mean by "* and ? suddenly become glob characters"? To me it seems like we would just allow filtering by subject.CN with that CL.
I'm happy to follow up with that mentioned CL and supporting tests if we decide to go forward with this.
Cc: rsleevi@chromium.org
see previous comment
That CL introduced two separate behaviours - wildcard/globbing support and subject CN support. I expressed particular concern with the former behaviour.

pmarko@ had been looking at unifying the matching behaviour (see Issue 905994) that would have avoided the globbing and allow filtering for both Subject and Issuer on CN, L, O, OU. Comment #9 on that bug seems like the best solution.

Sign in to add a comment