[Cyberduck-trac] [Cyberduck] #9452: WebDAV using p12 keystore stopped working after v4.8.1

Cyberduck trac at trac.cyberduck.io
Tue Apr 12 22:30:42 UTC 2016

#9452: WebDAV using p12 keystore stopped working after v4.8.1
    Reporter:  colinito  |      Owner:  dkocher
        Type:  defect    |     Status:  new
    Priority:  normal    |  Milestone:
   Component:  webdav    |    Version:  4.8.1
    Severity:  normal    |   Keywords:  Inoperability failure, mac
Architecture:  Intel     |   Platform:  Mac OS X 10.11
 We've noticed an increase in "inoperability failures" when connecting to
 secure webdav using P12's generated as part of our 2FA requirement when
 connecting to our SaaS based web platform. The login process never
 transfers from the certificate selection to allowing access to the key

 We've tracked it by trial/error to a change somewhere between version
 4.7.3 (works)  and 4.8.1 (failures)

 * Affected Systems: MBP 2.4/Core i5 OSX 10.9.5  &  MBP 2.7 Core i5 OSX
 * Working versions:  4.5 - 4.7.3.
 * Non-working version: First non-working version 4.8.1 (
 * Windows machine has worked through all versions up to and including 4.9

 Same remote webdav host/path and credentials and P12's used in all tests.

 Here are the OpenSSL commands used to create the P12 (if this helps at

 openssl req -new -sha256 -newkey rsa:1024 -nodes -out client.req -keyout
 openssl x509 -CA client.net_01.crt -CAkey client.net_011.key -CAserial
 client.net_011.srl -req -in client.req -out client.pem -days 365
 openssl pkcs12 -export -in client.pem -inkey client.key -certfile
 client.crt -name "client" -out client.p12

 I did notice that 4.8.1 was the first to have this:
 [Bugfix] Restore compatibility with OS X 10.7 - 10.9 (Mac)
 but unsure if that excludes versions 10.9.5 and higher... couldn't find a
 trac number to research further.

Ticket URL: <https://trac.cyberduck.io/ticket/9452>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows

More information about the Cyberduck-trac mailing list