mtls doesn't prompt browser for certificate about rustls HOT 7 CLOSED

$ cargo run --bin tlsserver-mio -- --certs localhost.pem --key localhost-key.pem --auth ca.pem --require-auth -p 8080 http

Please clarify what ca.pem is in this case -- is it issuer of the client cert, or the server's issuer?

from rustls.

ca.pem is the issuer of the client certificate.

from rustls.

I'm not in a position to test this on Edge/Windows, but with Firefox this works as I'd expect:

edit: also working on Chrome on Linux.

from rustls.

@RaniSharim Can you try your reproduction on Windows but using Firefox? It would be interesting to know whether it prompts for a client certificate.

from rustls.

Well I tested chrome again and it's suddenly working. I can't really explain it, perhaps some caching issue.
Firefox doesn't, but it doesn't surprise me, it has more strict rules about the certificate it's willing to work with, always had issues with self signed ones.
I'm closing the issue, there doesn't seem to be an actual server side problem.

Thanks everyone.

from rustls.

Thanks for reporting back :-)

from rustls.

I have a feeling that -- on Windows -- the certificates available are tied to a login session. So it might need a log-out/log-in cycle to work (or a reboot).

from rustls.