It’s Cybersecurity Awareness Month! Join our interactive training session, or learn about security and AI from 1Password experts.
Forum Discussion
drductus
4 months agoNew Contributor
Webauthn Integration Not Working URL mismatch?
I have built a webauthn integration that works perfectly with native android, google password manager, and bitwarden password manager. However, when I try to use 1Password to save the passkeys I get ...
- 3 months ago
Hi drductus ,
Ok! It sounds like the team has gotten to the bottom of this.
Likely your issue is that you TLS certificate is missing OCSP information, which is likely because if your CA is Let's Encrypt, they are currently deprecating OCSP support.
You can learn more about it here : https://letsencrypt.org/2024/12/05/ending-ocsp/
Are you using a Let's Encrypt CA?
Thanks,
Phil
drductus
4 months agoNew Contributor
1P_Phil have you been able to find anything? My investigations are still hitting dead ends about what is going on. I'm nearly at the point of pulling out wireshark to try to validate all the traffic.
1P_Phil
Moderator
3 months agoHi drductus ,
Ok! It sounds like the team has gotten to the bottom of this.
Likely your issue is that you TLS certificate is missing OCSP information, which is likely because if your CA is Let's Encrypt, they are currently deprecating OCSP support.
You can learn more about it here : https://letsencrypt.org/2024/12/05/ending-ocsp/
Are you using a Let's Encrypt CA?
Thanks,
Phil
- drductus3 months agoNew Contributor
Hey 1P_Phil! We are using Let's Encrypt as our CA, so it looks like our certificate would no longer have OCSP information but will have CRLs. Is there any point that 1Password will update to handle CRLs if the OCSP URLs are not present? Will our integration just continue to fail if we continue using Let's Encrypt? Is there a workaround?
- danilo_exactly3 months agoNew Contributor
we are having the same issue in our application. any plans to support CRLs?
- 1P_Phil3 months ago
Moderator
Hi danilo_exactly & drductus ,
I received confirmation that this is forthcoming. I will reply back regarding timing once I get it.
Cheers,
Phil!