joyent/node — Issue #2496: Renegotiate the SSL/TLS session if requested to allow to 'requestCert' per http request
Author: thomasfr
Created: 2012-01-09 15:01:16+00:00
State: open

At the moment a https server can be configured with 'requestCert:true'. This asks the client to provide a client certificate. In the browser this will pop up a selection dialog to select a certificate to use on the first request to any url on the server. Sometimes this is OK, but sometimes not. Especially for WebID (http://www.w3.org/2005/Incubator/webid/spec/) Authentication and Authorization (http://webid.info/) you usually want to deliver a nice login UI for your users and just want to show that certificate selection dialog on specific requests to urls like http://example.com/login for instance.

The corresponding Mailing List Thread where initial discussion with @bnoordhuis began: http://groups.google.com/group/nodejs/browse_thread/thread/ac6f4336825a4113

Kind regards