Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This question is loosely related to another one: IIS7.5 SSL Question, Safari users get a prompt of certificate to select, but since it was asked more than a year ago I thought that there may be some changes done in Safari.

So, the problem I am facing is following: I have a SSL protected service hosted by Apache with SSLVerifyClient optional setting on. All browsers except Safari let me get to the service without having client certificate installed, whereas Safari stops navigation if I hit cancel button on certificate selection popup.enter image description here

I was wondering if there is some setting in Safari that would make it possible to get through certificate selection or it is how it is with Safari and there is no chance to workaround it. Disabling client certificates in Apache is out of the question.

I am using Safari 5.1.7 on Windows and Mac

Thanks for any ideas.

share|improve this question

This is still a problem at this time (October 2015) in the latest Safari 8.0.6/7 versions with no indication of it getting fixed.

The only way I can get Safari to work with SSLVerifyClient optional is to really lower the restriction on the ciphers by setting them to SSLCipherSuite ALL. Of course this has the unwanted effect that weak cyphers can be used so I do not recommend it.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.