Dear Support,

After upgrading to the latest version of EO.Total 2017.2.75.0 (EO assembly version 17.2.43.0), the WebView has issues in raising the NeedClientCertificate when there is no client authentification certificates imported into the current user's personal certificate store. However, the same was working fine with version 17.0.40.0.

To give little background, we have a windows application where the EO.WebBrowserControl is used to render a web application. The web application requires a client certificate, which is passed on the associated webview's NeedClientCertificate event. The client certificate is not imported into the certificate store for business requirements. This was working fine with version 17.0.40.0. After upgrading the assemblies to 17.2.43.0, we noticed that the NeedClientCertificate is no more called. After spending few hours of research, we identified that the new version of EO does not fire up the event, if the certificate store (current user) does not contain any certificates (client authentication certificates) imported under Personal/Certificates folder. By importing any client authentication certificate under 'Personal' folder of the current user, the NeedClientCertificate event is called.

The behaviour is reproducible with the test project TabbedBrowser. Just make sure that the current user's certificate store does not contain any client authentication certificates imported under Personal/Certificates folder.

Do let me know, if there are workaround to resolve this issue or when to expect a fix. On our customer's system there is no guarantee that any client authentication certificates imported and we certainly do not want to import the client authentification certificate into the certificate store.

Best Regards,
Ananda Kumar

Hi,

Sorry about the delay. We have looked into this issue. We will be able to provide a test build to you this week to see if it addresses the issue for you. If the test build does not address the issue, we may need further information/test code/files from you.

Thanks!

Hi,

We have the test build ready. Please see your private message for the download location.

Thanks!

Hi,

This is just to let you know that we have posted the official build that contains the fix. You can download the new build from our download page.

Thanks!

Hi,

There is no way for you to use different client certificate without restarting the engine. The client certificate must be cached because event when requesting a single page could involve multiple requests (such as requesting images and JavaScript files used by the page). If the client certificate is not cached, then NeedClientCertificate event would be triggered once for each of these requests, which can cause the user to be prompted 10s of times just to load a single page. Obviously that is not a workable solution.

Thanks!

No. Unfortunately this is not how client certificate works. The certificates are exchanged during SSL handshake stage. This occurs when the client is trying to establish a connection to the server. On the other hand Request object occurs over HTTP/HTTPs, that is a higher layer in the protocol stack.

Hi,

You will have to find out the root of out of memory error and resolve that. The current build (2020.1.31.0) does support Windows 7.

Thanks!

HTTPs and client certificates are two different things. HTTPs implies a server certificate. However NeedClientCertificate will only be fired if the server is also configured to require a client certificate.