[Macpartners] SAPweb and Google Chrome

[Quentin Smith]

Hi John-Elmer and Felix,

There's actually a bug in Google Chrome that causes these multiple 
certificate prompts. Basically, Chrome just started supporting the latest 
version of the https protocol, TLS 1.2. The SAPweb aren't compatible with 
Chrome's implementation of TLS 1.2, so when Chrome discovers this, it 
falls back to the older TLS 1.1. In the process, Chrome discards your 
choice of certificate, since it doesn't know if that is why the connection 
failed.

This is the following Chrome bugs:
https://code.google.com/p/chromium/issues/detail?id=325254
https://code.google.com/p/chromium/issues/detail?id=66517

I believe there are situations where continuing to choose a certificate 
does not eventually result in SAPweb loading. It sounds like this should 
be fixed in the current Chrome Canary, however (version 34).

Best,
--Quentin

On Tue, 24 Dec 2013, John-Elmer Canfield wrote:

> Yes Felix, Chrome does seem to work for SAP access, but you must respond to multiple dialogs to select and approve access to your certificate.
> One of the things the CertAid app does besides obtaining a certificate is to install configuration options for the various secure MIT websites (including the SAP sites), so that Safari knows to
> access them without presenting all those annoying dialogs.
> 
> 
> Thanks,
> 
> John-Elmer
> 
> 
> 
> On Dec 23, 2013, at 12:38 PM, Felix Kreisel <fjk at MIT.EDU> wrote:
>
>       Does MIT SAPweb support Google Chrome? I always run into a gauntlet of certificate challenges with it. Safari seems fine.
>
>       Felix Kreisel - Systems Engineer,
> Plasma Science & Fusion Center, MIT
> 617-253-8625   fjk at mit.edu
> c. 617-497-1783
> 
> _______________________________________________
> Macpartners mailing list
> Macpartners at mit.edu
> http://mailman.mit.edu/mailman/listinfo/macpartners
> 
> 
> 
>