138330 2014-11-03 15:43:28 -0800 Client certificate credentials with session persistence don’t work 2014-11-03 16:17:32 -0800 1 1 1 Unclassified WebKit Page Loading 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 mitz webkit-unassigned ap oldest_to_newest 1045878 0 mitz 2014-11-03 15:43:28 -0800 When then client passes an NSURLCredential containing an identity with session persistence, the credential isn’t used. 1045881 1 240879 mitz 2014-11-03 15:52:30 -0800 Created attachment 240879 Handle session-persistent credentials that aren’t user+password correctly 1045890 2 mitz 2014-11-03 16:17:32 -0800 Fixed in <http://trac.webkit.org/r175495>. 240879 2014-11-03 15:52:30 -0800 2014-11-03 16:00:15 -0800 Handle session-persistent credentials that aren’t user+password correctly 138330.diff text/plain 3986 mitz SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDE3NTQ5MykKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDIyIEBACisyMDE0LTExLTAzICBEYW4gQmVy bnN0ZWluICA8bWl0ekBhcHBsZS5jb20+CisKKyAgICAgICAgQ2xpZW50IGNlcnRpZmljYXRlIGNy ZWRlbnRpYWxzIHdpdGggc2Vzc2lvbiBwZXJzaXN0ZW5jZSBkb27igJl0IHdvcmsKKyAgICAgICAg aHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTEzODMzMAorCisgICAgICAg IFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIEkgdGhpbmsgdGhpcyBpcyBu b3QgdGVzdGFibGUgd2l0aCBvdXIgdGVzdCBIVFRQIHNlcnZlci4KKworICAgICAgICAqIHBsYXRm b3JtL25ldHdvcmsvQ3JlZGVudGlhbFN0b3JhZ2UuY3BwOgorICAgICAgICAoV2ViQ29yZTo6Q3Jl ZGVudGlhbFN0b3JhZ2U6OnNldCk6IERvbuKAmXQgcmVxdWlyZSBhIHZhbGlkIFVSTCBmb3IgY2xp ZW50IGNlcnRpZmljYXRlCisgICAgICAgIGNyZWRlbnRpYWxzLCBzaW5jZSB0aGV5IGRvbuKAmXQg YXBwbHkgdG8gYSBzcGVjaWZpYyBwYXRoLiBEb27igJl0IHNhdmUgc3VjaCBjcmVkZW50aWFscyB0 bworICAgICAgICBDRk5ldHdvcmvigJlzIHBlcnNpc3RlbnQgc3RvcmFnZSAod2Ugb25seSBkbyB0 aGF0IGFzIGEgd29ya2Fyb3VuZCBmb3Igc2hhcmluZyBjcmVkZW50aWFscworICAgICAgICB3aXRo IHRoZSBtZWRpYSBmcmFtZXdvcmssIGFuZCB3ZSBkb27igJl0IHdhbnQgdG8gZXhwYW5kIHRoZSBz Y29wZSBvZiB0aGUgd29ya2Fyb3VuZCkuCisgICAgICAgICogcGxhdGZvcm0vbmV0d29yay9jZi9S ZXNvdXJjZUhhbmRsZUNGTmV0LmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OlJlc291cmNlSGFuZGxl OjpyZWNlaXZlZENyZWRlbnRpYWwpOiBDaGFuZ2VkIHRvIHVzZSB0aGUgQ3JlZGVudGlhbCBjb25z dHVyY3RvcgorICAgICAgICB0aGF0IHRha2VzIGEgQ3JlZGVudGlhbCBhbmQgYSBuZXcgcGVyc2lz dGVuY2UsIHNvIHRoYXQgdGhpcyBjb2RlIHdvcmtzIG5vdCBvbmx5IHdpdGgKKyAgICAgICAgdXNl citwYXNzd29yZCBjcmVkZW50aWFscy4KKwogMjAxNC0xMS0wMyAgU2ltb24gRnJhc2VyICA8c2lt b24uZnJhc2VyQGFwcGxlLmNvbT4KIAogICAgICAgICBWaWRlbyBjb250cm9scyBoYXZlIGxvdHMg b2YgY29tcG9zaXRpbmcgbGF5ZXJzCkluZGV4OiBTb3VyY2UvV2ViQ29yZS9wbGF0Zm9ybS9uZXR3 b3JrL0NyZWRlbnRpYWxTdG9yYWdlLmNwcAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2ViQ29yZS9w bGF0Zm9ybS9uZXR3b3JrL0NyZWRlbnRpYWxTdG9yYWdlLmNwcAkocmV2aXNpb24gMTc1NDg4KQor KysgU291cmNlL1dlYkNvcmUvcGxhdGZvcm0vbmV0d29yay9DcmVkZW50aWFsU3RvcmFnZS5jcHAJ KHdvcmtpbmcgY29weSkKQEAgLTkzLDE2ICs5MywxNyBAQCBzdGF0aWMgU3RyaW5nIHByb3RlY3Rp b25TcGFjZU1hcEtleUZyb21VCiAKIHZvaWQgQ3JlZGVudGlhbFN0b3JhZ2U6OnNldChjb25zdCBD cmVkZW50aWFsJiBjcmVkZW50aWFsLCBjb25zdCBQcm90ZWN0aW9uU3BhY2UmIHByb3RlY3Rpb25T cGFjZSwgY29uc3QgVVJMJiB1cmwpCiB7Ci0gICAgQVNTRVJUKHByb3RlY3Rpb25TcGFjZS5pc1By b3h5KCkgfHwgdXJsLnByb3RvY29sSXNJbkhUVFBGYW1pbHkoKSk7Ci0gICAgQVNTRVJUKHByb3Rl Y3Rpb25TcGFjZS5pc1Byb3h5KCkgfHwgdXJsLmlzVmFsaWQoKSk7CisgICAgQVNTRVJUKHByb3Rl Y3Rpb25TcGFjZS5pc1Byb3h5KCkgfHwgcHJvdGVjdGlvblNwYWNlLmF1dGhlbnRpY2F0aW9uU2No ZW1lKCkgPT0gUHJvdGVjdGlvblNwYWNlQXV0aGVudGljYXRpb25TY2hlbWVDbGllbnRDZXJ0aWZp Y2F0ZVJlcXVlc3RlZCB8fCB1cmwucHJvdG9jb2xJc0luSFRUUEZhbWlseSgpKTsKKyAgICBBU1NF UlQocHJvdGVjdGlvblNwYWNlLmlzUHJveHkoKSB8fCBwcm90ZWN0aW9uU3BhY2UuYXV0aGVudGlj YXRpb25TY2hlbWUoKSA9PSBQcm90ZWN0aW9uU3BhY2VBdXRoZW50aWNhdGlvblNjaGVtZUNsaWVu dENlcnRpZmljYXRlUmVxdWVzdGVkIHx8IHVybC5pc1ZhbGlkKCkpOwogCiAgICAgcHJvdGVjdGlv blNwYWNlVG9DcmVkZW50aWFsTWFwKCkuc2V0KHByb3RlY3Rpb25TcGFjZSwgY3JlZGVudGlhbCk7 CiAKICNpZiBQTEFURk9STShJT1MpCi0gICAgc2F2ZVRvUGVyc2lzdGVudFN0b3JhZ2UocHJvdGVj dGlvblNwYWNlLCBjcmVkZW50aWFsKTsKKyAgICBpZiAocHJvdGVjdGlvblNwYWNlLmF1dGhlbnRp Y2F0aW9uU2NoZW1lKCkgIT0gUHJvdGVjdGlvblNwYWNlQXV0aGVudGljYXRpb25TY2hlbWVDbGll bnRDZXJ0aWZpY2F0ZVJlcXVlc3RlZCkKKyAgICAgICAgc2F2ZVRvUGVyc2lzdGVudFN0b3JhZ2Uo cHJvdGVjdGlvblNwYWNlLCBjcmVkZW50aWFsKTsKICNlbmRpZgogCi0gICAgaWYgKCFwcm90ZWN0 aW9uU3BhY2UuaXNQcm94eSgpKSB7CisgICAgaWYgKCFwcm90ZWN0aW9uU3BhY2UuaXNQcm94eSgp ICYmIHByb3RlY3Rpb25TcGFjZS5hdXRoZW50aWNhdGlvblNjaGVtZSgpICE9IFByb3RlY3Rpb25T cGFjZUF1dGhlbnRpY2F0aW9uU2NoZW1lQ2xpZW50Q2VydGlmaWNhdGVSZXF1ZXN0ZWQpIHsKICAg ICAgICAgb3JpZ2luc1dpdGhDcmVkZW50aWFscygpLmFkZChvcmlnaW5TdHJpbmdGcm9tVVJMKHVy bCkpOwogCiAgICAgICAgIFByb3RlY3Rpb25TcGFjZUF1dGhlbnRpY2F0aW9uU2NoZW1lIHNjaGVt ZSA9IHByb3RlY3Rpb25TcGFjZS5hdXRoZW50aWNhdGlvblNjaGVtZSgpOwpJbmRleDogU291cmNl L1dlYkNvcmUvcGxhdGZvcm0vbmV0d29yay9jZi9SZXNvdXJjZUhhbmRsZUNGTmV0LmNwcAo9PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09Ci0tLSBTb3VyY2UvV2ViQ29yZS9wbGF0Zm9ybS9uZXR3b3JrL2NmL1Jlc291cmNlSGFu ZGxlQ0ZOZXQuY3BwCShyZXZpc2lvbiAxNzU0ODgpCisrKyBTb3VyY2UvV2ViQ29yZS9wbGF0Zm9y bS9uZXR3b3JrL2NmL1Jlc291cmNlSGFuZGxlQ0ZOZXQuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC00 MjQsNyArNDI0LDcgQEAgdm9pZCBSZXNvdXJjZUhhbmRsZTo6cmVjZWl2ZWRDcmVkZW50aWFsKAog ICAgIGlmIChjcmVkZW50aWFsLnBlcnNpc3RlbmNlKCkgPT0gQ3JlZGVudGlhbFBlcnNpc3RlbmNl Rm9yU2Vzc2lvbiAmJiBjaGFsbGVuZ2UucHJvdGVjdGlvblNwYWNlKCkuYXV0aGVudGljYXRpb25T Y2hlbWUoKSAhPSBQcm90ZWN0aW9uU3BhY2VBdXRoZW50aWNhdGlvblNjaGVtZVNlcnZlclRydXN0 RXZhbHVhdGlvblJlcXVlc3RlZCkgewogICAgICAgICAvLyBNYW5hZ2UgcGVyLXNlc3Npb24gY3Jl ZGVudGlhbHMgaW50ZXJuYWxseSwgYmVjYXVzZSBvbmNlIE5TVVJMQ3JlZGVudGlhbFBlcnNpc3Rl bmNlUGVyU2Vzc2lvbiBpcyB1c2VkLCB0aGVyZSBpcyBubyB3YXkKICAgICAgICAgLy8gdG8gaWdu b3JlIGl0IGZvciBhIHBhcnRpY3VsYXIgcmVxdWVzdCAoc2hvcnQgb2YgcmVtb3ZpbmcgaXQgYWx0 b2dldGhlcikuCi0gICAgICAgIENyZWRlbnRpYWwgd2ViQ3JlZGVudGlhbChjcmVkZW50aWFsLnVz ZXIoKSwgY3JlZGVudGlhbC5wYXNzd29yZCgpLCBDcmVkZW50aWFsUGVyc2lzdGVuY2VOb25lKTsK KyAgICAgICAgQ3JlZGVudGlhbCB3ZWJDcmVkZW50aWFsKGNyZWRlbnRpYWwsIENyZWRlbnRpYWxQ ZXJzaXN0ZW5jZU5vbmUpOwogCiAgICAgICAgIFVSTCB1cmxUb1N0b3JlOwogICAgICAgICBpZiAo Y2hhbGxlbmdlLmZhaWx1cmVSZXNwb25zZSgpLmh0dHBTdGF0dXNDb2RlKCkgPT0gNDAxKQo=