knownissues.txt

Safari issues
=======================
1. 
--Issue--: 
Safari 'remembers' SSL certificate choice and will not prompt again after selection:
https://discussions.apple.com/message/22461058#22461058
--Workaround--: 
Can manually assign desired certificate as shown here: http://support.apple.com/kb/HT1679

2.
--Issue--:
Safari requires a certificate if there is one in the browser already (cancelling leads to denied page)
even when server is set to clientAuth="want":
http://superuser.com/questions/521919/safari-forces-user-to-select-client-certificate-even-if-it-is-optional
http://lists.apple.com/archives/apple-cdsa/2012/Dec/msg00005.html
--Workaround--:
Remove certificates from keychain or select suitable certificate.

3. 
--Issue--:
Safari can't distinguish the correct issuing CA for the clients certificate. 
If you go to the dev CA portal and you don't have a DEV ca cert but you do have a real 
CA cert from the UK CA, then Safari always requests a client cert selection.  
Cancelling leads to denied page. 


Tomcat issues
===============
See README.txt