Updates:
        Labels: Regression

Comment #10 on issue 6893 by w...@chromium.org: Support SSL renegotiation on  
Windows
http://code.google.com/p/chromium/issues/detail?id=6893

barhom: thanks for the Skandiabanken URL.  Using the URL, I got the
answers to the other two questions.

1. SSL renegotiation works in Google Chrome 1.0.  So I marked this bug
as a regression.

2. During the renegotiation, Skandiabanken requests a client certificate.
This client certificate request causes different outcomes for Google
Chrome 1.0 depending on the version of Windows you're using.

If you use Google Chrome 1.0 on Windows XP SP2, you will get Google Chrome's
error page with error code 110 (ERR_SSL_CLIENT_AUTH_CERT_NEEDED).  If you
use Google Chrome 1.0 on Windows XP SP3 or Vista, you will reach a page
titled "Hämta certifikat" at
https://secure.skandiabanken.se/cert/gibcert/Login.aspx

So the bad news is that even if I add the support for SSL renegotiation,
you may still not be able to use the Skandiabanken site fully because
we don't support SSL client authentication yet.

The good news is that while investigating the above, I got SSL renegotiation
working with just a few lines of code.  The patch is much simpler than I  
thought.
Since I haven't worked on the SSL code for a long time, I'll need to spend
some more time to understand the code again.  I also need to set up a server
for testing.  I estimate I should be able to fix this bug in two weeks.

If any of you can provide other URLs that require SSL renegotiation, that'll
help my testing.  Thanks!

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to