Bug 5920 – Certificates and authentication at skandiabanken.no

• Component: New Bugs
• Status: RESOLVED CONFIGURATION CHANGED

[Kristoffer Lein]

This is site uses certificates to access your personal bank account. When log-in you have to subscribe 
for root and user certificate to authenticate.

Safari does no longer download the certificate .aspx-files but referrs to that it won't re-direct to 
HTTPS-servers. (Before you could extract the certificate-files in clear text and add them manually to 
keychain.app and it would work.)

Now the process is:

•Download Firefox
•Install Certificates in Firefox
•Export Certificates to Desktop
•Import to Keychain

And eventually it would work. Did someone say: "Macs are such a please to use!"?

Still this is no good solution. (What's worse is making Safari identify as Netscape 6 would make the 
site's pull-down menus work much better.)

Technically I don't know much more to add - but please tell me what info I need to collect and I'll try to 
get it for you.

[Joost de Valk (AlthA)]

Reassigning to webkit-unassigned, to make sure more people see this.

[Joost de Valk (AlthA)]

This is something for the Apple guys, please file this bug in Radar, cc-ing Alice Liu for the same purpose. If you have filed it in Radar, please close this bug.

[David Kilzer (:ddkilzer)]

Moving component to "New Bugs" since this is likely a Safari issue rather than a WebKit issue.  The "Website" component is used for http://webkit.opendarwin.org/ issues.

Reporter, please file a bug via RadarWeb or the non-developer bug report form.

https://bugreport.apple.com/   [for ADC members]
http://developer.apple.com/bugreporter/bugrptform.html

If you get a Radar bug number, please note it here.

[john plumridge]

 i don't ge integration with keychain in webkit safari, but do with normal version

[john plumridge]

 i don't get integration with keychain in webkit safari, but do with normal version os x  (10.4.5)

[Kristoffer Lein]

Radar bug number: 4478536

[Kristoffer Lein]

Update:

Using Safari 3.0.4 (5523.10) on Mac OSX 10.5.1, Safari now downloads and saves two files. On CA-certificate and one personal certificate.

The CA-certificate is saved in one file, containing only the certificate. File ending is .aspx.

The personal certificate is saved in another file which in the beginning of the file contain the personal certificate, and a following HTML-document that instructs you to restart your browser. This file ends in .aspx.html.

Keychain does not automatically import the certificates nor does the success message in the last file get displayed/rendered.

[Alexey Proskuryakov]

Sorry, but looks like we need to ask you to file this to Radar again. Please describe the current behavior and what the correct one would be.

[Kristoffer Lein]

Filed in http://developer.apple.com/bugreporter/bugrptform.html.

I will let you know if I receive a radar number.

[Kristoffer Lein]

I think this is the new radar number: 5644473.

[Alexey Proskuryakov]

Thank you!

[Joseph Holsten]

I'm not entirely sure how to reproduce this bug. When I click 'Logg in', it redirects to the https page just fine. Seems like it works for me. Can anyone tell if it's still in radar?

[Alexey Proskuryakov]

I believe one needs to be a customer of this bank to reproduce the issue.

[Karl Dubost]

Skandiabanken.no doesn't exist anymore in Norway. (the domain still exists in Sweeden)
It has been replace by https://sbanken.no/ now. 

Let's close.