UI does not include client certificate in all ajax requests

[selaux]

Nomad version

Nomad v0.7.1 (0b295d3)

Issue

It seems like not all ajax requests include the client certificate that was selected. E.g. when visiting the clients page, the request to /v1/status/leader returns a 400 Bad Request error because no client certificate was sent.

Listing nodes through the CLI works fine.

Reproduction steps

• Enable tls for http
• Visit nomad ui and select valid client certificate
• Visit /ui/jobs -> Works as expected
• Visit /ui/clients -> shows error page

[schmichael]

We have an idea what the issue might be, but I've been unable to reproduce this bug in my browser (Google Chrome 63.0.3239.108 (Official Build) (64-bit)).

What browser are you using?

[selaux]

I'm using Firefox 57.0b3 (64-bit) Developer Edition.

[selaux]

BTW, same goes for basic auth. The header is not sent as well.

[selaux]

And it indeed works in chrome for me as well...

[schmichael]

@selaux Thanks for testing! I think we know the fix. Should have a PR up next week for inclusion in the next release. In the meantime I'm afraid you'll have to use Chrome/Chromium. I think Firefox is actually doing the right thing here, so I hope Chrome doesn't "fix" it in the meantime!

[schmichael]

Tested Firefox 57.0.4 (57.0.4+build1-0ubuntu0.17.04.1 amd64) and confirmed it does break against 0.7.1.

Fixed in #3728 but until the fix is in a release you'll have to use Chrome/Chromium I'm afraid.

Thanks for the report!

[selaux]

Nice. Thx for the quick fix.

[github-actions]

I'm going to lock this issue because it has been closed for 120 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.