Please review this "detection" patch for the following ticket:
* PKI TRAC Ticket #2306 - Chrome Can Not Submit EC Client Cert
Requests <https://fedorahosted.org/pki/ticket/2306>
The ticket will not be closed, but simply moved to a later milestone.
-- Matt
From 6a8e4cd874c54e5e2aa9bf36622bca8a575c203e Mon Sep 17 00:00:00 2001
From: Matthew Harmsen <mharm...@redhat.com>
Date: Fri, 13 May 2016 16:41:16 -0600
Subject: [PATCH] Detect inability to submit ECC CSR on Chrome
- PKI TRAC Ticket #2306 - Chrome Can Not Submit EC Client Cert Requests
---
base/ca/shared/webapps/ca/ee/ca/ProfileSelect.template | 11 +++++++++++
1 file changed, 11 insertions(+)
diff --git a/base/ca/shared/webapps/ca/ee/ca/ProfileSelect.template b/base/ca/shared/webapps/ca/ee/ca/ProfileSelect.template
index 18a0b21..a683867 100644
--- a/base/ca/shared/webapps/ca/ee/ca/ProfileSelect.template
+++ b/base/ca/shared/webapps/ca/ee/ca/ProfileSelect.template
@@ -147,6 +147,11 @@ function getKeyGenDisabledWarning() {
document.write('<br>');
}
+function getChromeECCSupportWarning() {
+ document.write('<p> <font color="red"> Warning: Currently, this profile is unable to successfully construct an ECC certificate request on Chrome.<br><br>At this time, please use Firefox to generate ECC certificate requests.</font> </p>');
+ document.write('<br>');
+}
+
function getKeyStrengthTableForKeyGen() {
document.writeln("<table border='1'> <caption> KeyGen Key Strength Info </caption> <tr> <th> Key Type </th> <th> High Grade </th> <th> Medium Grade </th> </tr>");
@@ -871,6 +876,12 @@ for (var m = 0; m < inputPluginListSet.length; m++) {
getKeyGenDisabledWarning();
}
+ if (browserName == "Chrome") {
+ // PKI TRAC Ticket #2306 - Chrome Can Not Submit EC
+ // Client Cert Requests
+ getChromeECCSupportWarning();
+ }
+
getKeyStrengthTableForKeyGen();
var keyTypesOptions = getKeyTypesOptionsForKeyGen();
--
1.8.3.1
_______________________________________________
Pki-devel mailing list
Pki-devel@redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel
