You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Margus Pärt <ma...@tione.eu> on 2011/10/03 16:21:42 UTC
[users@httpd] SSL Smartcard and Chrome browser
Hello!
Problem #1
1. Log in to site1.com with Smartcard (and enter PIN1)
2. Go to site2.com and enter with Smartcard
Result:
No PIN1 is asked. (Chrome caches PIN1)
Problem #2
1. Log in to site1.com with Smartcard (SSLCacheTimeout and
KeepAliveTimeout are 1)
2. Try to log in again without Smartcard
Result:
Certificate is not asked again. (Haven't had the time to test, but
Chrome probably keeps TCP session up, so SSL session is never timed
out.)
Any ideas?
Br,
Margus
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] SSL Smartcard and Chrome browser
Posted by Devraj Mukherjee <de...@gmail.com>.
How is this an Apache question?
On Tue, Oct 4, 2011 at 1:21 AM, Margus Pärt <ma...@tione.eu> wrote:
> Hello!
>
>
> Problem #1
>
> 1. Log in to site1.com with Smartcard (and enter PIN1)
> 2. Go to site2.com and enter with Smartcard
>
>
> Result:
> No PIN1 is asked. (Chrome caches PIN1)
>
>
>
> Problem #2
>
> 1. Log in to site1.com with Smartcard (SSLCacheTimeout and
> KeepAliveTimeout are 1)
> 2. Try to log in again without Smartcard
>
> Result:
> Certificate is not asked again. (Haven't had the time to test, but
> Chrome probably keeps TCP session up, so SSL session is never timed
> out.)
>
>
>
>
> Any ideas?
>
>
> Br,
> Margus
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org