Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We're thinking of improving the authentication of some critical webpages with client certificates, but we're not sure whether it's a widely used standard.

Are SSL Client Certificates well supported by all major browsers? In particular, do they work on the following browsers?

  • Internet Explorer
  • Mozilla Firefox
  • Google Chrome
  • Apple Safari (Mac and iOS)
  • Android Web Browser

(We use Apache on the servers, if that matters)

share|improve this question
    
Any browser that can access https sites supports certificates. –  John Gardeniers Sep 18 '11 at 1:16
    
@John Could you please confirm you're talking about the client certificates that are used to authenticate the client? –  netvope Sep 18 '11 at 1:19
    
sorry, I think I misunderstood the question. –  John Gardeniers Sep 18 '11 at 4:12
add comment

2 Answers

I don't have a way of testing all of this, but this site came up on google with instructions for installing PKCS#12 certificate/key pairs in a number of different situations, including on the iPhone.

It seems that Android only uses PKCS#12 certificates for VPN authentication. Here is the wishlist entry for browser client authentication support using imported certificates.

share|improve this answer
add comment

That depends on the CA (Certificate Authority) and whether they are included as defaults or updates to the various web browsers. You can get a general idea by looking through the default CAs included/identified with the various web browsers.

Non-included CAs will result in a warning screen via the web browsers, which may cause some alarm/concern with some users.

SSL over HTTPS support is generally universal across the contemporary web browsers.

share|improve this answer
    
Do you imply that all browsers support client certificates, and the only problem is that the browser's trusted CA list may not include the one I used (i.e. the same problem server certificates face)? –  netvope Sep 18 '11 at 1:07
    
Yes, SSL support is practically universal for all contemporary web browsers. –  user48838 Sep 18 '11 at 1:11
1  
Are you sure you you're not talking about server certificates? –  MDMarra Sep 18 '11 at 1:14
    
Actually, there may be additional warnings if a certificate is not used in the application/use that is has been identified for (if it can be somehow installed in the first place). –  user48838 Sep 18 '11 at 1:20
1  
You're talking about something completely different what the OP asked. –  womble Sep 18 '11 at 3:37
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.