Bug 64977 – Webkit build r91478 crashes while attempting to access a site that requires a KCA

• Status: UNCONFIRMED
• Component: Page Loading

[Jason Broccardo]

Webkit build r91478 crashes while attempting to access a site that requires a KCA

Summary:
Webkit build r91478 running on a 10.6.8 machine crashes when attempting to load a web page that requires the use of a Kerberos Certificate Authority (KCA) for authentication.

Steps to Reproduce:
To reproduce this bug, you will need to have a Kerberos Certificate Authority infrastructure in place, though it might also fail with any x509 certificate infrastructure. You will also need a Mac running 10.6.8 with all security and Java updates current as of 7/21/11

1. Obtain a valid KCA certificate.
2. Import the certificate into user keychain using Keychain Access and set trust values for certificate to "Allows 
3. Launch Webkit build r91478
4. Navigate to a site that requires authenticating with a KCA certificate

At this point, Webkit build r91478 will crash.

Expected Results:
Under previous versions of Safari 5.0.x, upon landing at the site, Safari would either display a prompt asking which certificate to use for authentication or would automatically proceed if a certificate had previously been declared.

Have duplicate the results on multiple machines running both Mac OS X and Mac OS X Server 10.6.8.
Have duplicated the results with Safari 5.1

Google Chrome 12.0.742.122, another WebKit browser, successfully recognizes certificates and correctly loads the all pages with crash or error.

Problem appears confined to Macs running 10.6.8 and Webkit build r91478.

Notes:
Information about KCAs: http://computing.fnal.gov/xms/Services/Getting_Services/Certificates/what_is_a_certificate

See also Apple Bug 9817521