HTTPS Client Certificates stop working mid-session

kilenaitor

Steps to reproduce:
Not sure how to exactly reproduce but it's been happening consistently for me.

Have a site that uses HTTPS client certificates as the authentication mechanism
Selected the proper certificate and see that authentication works as expected
Continue to use browser as normal
After some time (₁₀ minutes for me), the client authentication stops working. It appears as if the certificates are no longer being sent.

Restarting Orion gets things working again, so there is a workaround. But yeah not exactly convenient.

Doesn't appear to be the site's fault as this works as expected in other browsers (Safari, Firefox, Chrome).

I've tweaked a few things like disabling content blockers and enabling compatibility mode but I don't think those would have any effect on this behavior.

Expected behavior:

Certificate authentication continues to work without interruption

Orion, OS version; hardware type:
Orion: Version 0.99.113-beta (WebKit 613.1.12)
OS: macOS 12.2.1 (21D62)
Hardware: MacBook Pro (16-inch, 2019)

Image/Video:
N/A

Vlad

kilenaitor We will need steps to reproduce with at least one website.

kpsuperplane

I don't have an easy way for you to repro, but I can confirm this happens with the cert on my company computer. The time it takes for it to stop working is very inconsistent, I've seen it vary from 30 seconds to 20 minutes

Vlad

kpsuperplane Not sure what we can do in this case without steps to reproduce the issue.

feltag

I am also encountering this isse. It is an absolute showstopper for me since I am using mTLS secured websites on a daily basis.

Here is an absolute minimal demo to showcase the issue
https://hidden-snowflake-2886.fly.dev

Here is the complete source / configuration for the deployment https://github.com/heilerich/mtls-demo

Here is a video that shows what happes. This is a fresh Orion profile. I have already downloaded the client certificate and imported it into my keychain.

First the website is loading just fine
I am then pressing refresh a few times. At some reload it loses the authenticated session and I get a 403.
Re-opening in a new tab does not solve the problem
Restarting Orion restores access for a few requests until it drops the session again

Vlad

feltag would you be able to upload a video of behaviour in safari?

feltag

Sure. Here is the same thing in Safari, although it is pretty boring ... It just works as expected :-)

Same demo website, same machine, same user, same certificate. The initial delay caused by me entering my password to unlock keychain off screen.

onion

Happens to me too.

KOB25

+1 for a fix please