Improve SSL Auth error reporting
Currently, whenever something goes wrong with SSL Auth (by AJAX), users see a "Certificate required" error message.
Because of this some of our (large) users waste a lot of time investigating:
- Is it a workstation issue (smartcard not inserted)
- Is it a certificate issue (revoked, expired...)
- Is it a session issue (DN not found, grantSession rule failed)
We need to give users better feedback
Ideas so far
- Try to see if the AJAX query can return meaningful information (it doesn't seem to be the case)
- Maybe create a different endpoint for ssl auth ? (/authssl) that gives better reporting