Chrome policy via DevicePolicyManager: AutoSelectCertificateForUrls not working
Reported by
christia...@gmail.com,
Jun 6 2018
|
|||
Issue description
Steps to reproduce the problem:
1. Setting AutoSelectCertificateForUrls value for Chrome policy not working when testing against a site that requires a client certificate.
What is the expected behavior?
Auto selection of the certificate specified in the filter
What went wrong?
chrom://policy shows the setting AutoSelectCertificateForUrls as Unknown Policy
Did this work before? N/A
Chrome version: 66.0.3359.158 Channel: stable
OS Version: 6.0.1
Flash Version: n/a
Example of json being set: [{"pattern": "https://pprgvm.eastus.cloudapp.azure.com","filter":{"ISSUER":{"CN":"corp-TestVM-CA"}}}]
,
Jun 8 2018
+hendrich@ since pmarko@ is OOO for 2 weeks.
,
Jun 8 2018
Marking this as feature as the policy has not been implemented for Android until now IIUC (see 'Supported On' on https://www.chromium.org/administrators/policy-list-3#AutoSelectCertificateForUrls). Or has it worked for you previously? Bartosz, would you know if we have this / something similar for Android?
,
Jun 8 2018
I am not certain it if is supported on Android or not (I have looked at the link referenced android as a platform isn not listed). What has thrown me off is the following from the link:
Android/Linux:
["{"pattern":"https://www.example.com","filter":{"ISSUER":{"CN":"certificate issuer name"}}}"]
It includes Android in the example. Can you confirm this not supported on Android? If not, then yes, it would be considered a feature.
Thanks - Christian
,
Jun 8 2018
Did not answer your direct question. No, it has not worked for me previously as this is new development.
,
Jul 5
The ground truth is the the policy_templates.json file in Chrome's source code [1]. It specifies that we support desktop (Linux/Windows/Mac) and Chrome OS only. The fact that Android and Linux use the same policy format leads to somewhat misleading documentation, unfortunately. The "Android/" part in the example is wrong. In general, on Android, certificate auto-selection is provided by the DPC, not inidividual apps [2]. [1] https://chromium.googlesource.com/chromium/src/+/master/components/policy/resou rces/policy_templates.json [2] https://developer.android.com/reference/android/app/admin/DeviceAdminReceiver#onChoosePrivateKeyAlias(android.content.Context,%20android.content.Intent,%20int,%20android.net.Uri,%20java.lang.String) |
|||
►
Sign in to add a comment |
|||
Comment 1 by ljusten@chromium.org
, Jun 8 2018Owner: pmarko@chromium.org
Status: Assigned (was: Unconfirmed)