By the way… http://www.zdnet.com/article/google-chrome-is-backing-away-from-public-key-pinning-and-heres-why/
Support for SSL client certificate and Basic/Digest at same time
-
@rfc2822 i would also like to test the feature and would appreciate an apk in advance, thank you very much for this great work!
-
@bahnfrei do you use the Play Store?
-
@devvv4ever It depends on…
I’ve one device with Play Store access and another one without gapps and fdroid only… -
@rfc2822 I just did an initial test with version 3.3.6. The one annoyance was having to delete and recreate my accounts in order for the client cert button to appear in the Authentication section. With that done, it seems to work. Thank you so much for implementing this!
-
@foresto said in Support for SSL client certificate and Basic/Digest at same time:
@rfc2822 I just did an initial test with version 3.3.6. The one annoyance was having to delete and recreate my accounts in order for the client cert button to appear in the Authentication section. With that done, it seems to work. Thank you so much for implementing this!
It’s by design… our idea was that people who don’t use client certs (vast majority of users, and especially non-geeks) would possibly be confused when they suddenly have an option “client certificate” and would for instance play around with it when they get a server certificate error.
So we thought to enable this option only for accounts which already have a client certificate and the only way to set one is when creating the account.
-
@foresto, this may not be specific to this type of auth. I’m not sure DAVx5 allows updating an account once it has been created – I remember having to recreate an account when the port number was changed. This ‘limitation’ (c.f. a security feature) may actually be rooted in Android’s account management API.
-
@Patrick-Lai Updating the credentials is very different to updating all the URLs. It would be easy to allow adding a certificate after creating the account but I’m not sure whether it would be a good idea. Maybe it would… but at the moment it’s disabled.
Changing (I’d not say updating) all the URLs is as the moment not supported for different reasons.
-
@rfc2822 indeed URL is different.
Earlier today I lost my client cert setting. I was exploring account settings, and probably inadvertently deselected my certificate. I just had to recreate the account.
-
@Patrick-Lai said in Support for SSL client certificate and Basic/Digest at same time:
@rfc2822 indeed URL is different.
Earlier today I lost my client cert setting. I was exploring account settings, and probably inadvertently deselected my certificate. I just had to recreate the account.
Hm… I see. So it would probably be good to make the certificate option always visible.
-
With 3.3.7, the certificate selection will always be available in Account settings.