web-platform-tests/wpt

Testing if UA sends TLS client certs in CORS preflight OPTIONS request?

Open

#7873 opened on Oct 17, 2017

View on GitHub
 (1 comment) (0 reactions) (0 assignees)HTML (4,581 stars) (2,898 forks)batch import
good first issuehelp wanted

Description

I’m wondering if with wptserve it’s possible to test whether a UA sends TLS client certs in CORS preflight OPTIONS requests.

The context is https://bugs.chromium.org/p/chromium/issues/detail?id=775438 and https://bugzilla.mozilla.org/show_bug.cgi?id=1019603

Contributor guide

Tech stack
pythonjavascript
Domain
securitytesting
Issue type
research
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
TLS client certificatesCORS preflight requestswptserve testing framework
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
40
Research direction
Investigate the wptserve server code to see if it supports sending TLS client certificates and handling OPTIONS requests. Examine the existing test infrastructure for CORS preflight. Look at the linked Chromium and Mozilla bugs for expected behavior. Determine if modifications to wptserve are needed or if existing facilities can be used.