Uploaded image for project: 'Dogtag PKI'
  1. Dogtag PKI
  2. DOGTAG-2765

Coolkey PKCS#11 module won't prompt for login with CAC or PIV cards in CCID readers

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • None
    • None
    • esc
    • None
    • Moderate
    • rhel-idm-cs
    • rc
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • 42

      Description of problem:

      With Firefox and libcoolkeypk11 loaded as a security device, I'm not prompted to enter the PIN and
      access fails. I must manually log into the token via the FF Security Devices interface.

      Version-Release number of selected component (if applicable):

      SmartCardManager 1.14 on OS X 10.4.9 Intel.

      How reproducible:

      Always.

      Steps to Reproduce:
      1. Acquire a CAC or CAC/PIV Transitional card
      2. Load libcoolkeypk11 security module.
      3. Navigate to a website using SSL client authentication.

      Actual results:

      When "Ask me every time" cert seleciton is set, user is prompted for the certificate but not the PIN, and
      login fails.

      Expected results:

      PIN prompt should appear, and login should succeed.

              jmagne John Magne
              jira-bugzilla-migration RH Bugzilla Integration
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: