PHPFixing
  • Privacy Policy
  • TOS
  • Ask Question
  • Contact Us
  • Home
  • PHP
  • Programming
  • SQL Injection
  • Web3.0

Sunday, October 16, 2022

[FIXED] How can I use an HTTPS client certificate protected api with Firefox

 October 16, 2022     client-certificates, firefox, https, security     No comments   

Issue

I have protected my staging environment with an HTTPS client certificate. The site consists of multiple subdomains rest.site.com, files.site.com, site.com, etc.
Everyone has the same certificate.
The problem is that firefox doesn't send a client certificate with cors preflight requests. Which means those request will inevitably always fail and so firefox refuses to access the api at all.
So is there a way to force firefox to send the certificate with the preflight request?


Solution

  1. type into the url bar about:config
  2. find network.cors_preflight.allow_client_cert
  3. set to true

client certs will now be sent with preflight requests



Answered By - user2741831
Answer Checked By - Marie Seifert (PHPFixing Admin)
  • Share This:  
  •  Facebook
  •  Twitter
  •  Stumble
  •  Digg
Newer Post Older Post Home

0 Comments:

Post a Comment

Note: Only a member of this blog may post a comment.

Total Pageviews

Featured Post

Why Learn PHP Programming

Why Learn PHP Programming A widely-used open source scripting language PHP is one of the most popular programming languages in the world. It...

Subscribe To

Posts
Atom
Posts
Comments
Atom
Comments

Copyright © PHPFixing