You are not logged in.

#1 2020-09-29 15:01:52

AVDuma
Member
Registered: 2013-04-01
Posts: 21

Firefox is not able to find Smart Card

Hi all,

I run Firefox 81 from Arch Linux, fresh updated.

My system recognizes correctly the smart card reader when I plug my cards off and on, unfortunately if I try to log into websites using the certificate stored in my card, it simply doesn't find any certificate nor smart card.

As displayed in the image below, firefox shows the smart card reader with the status "not present", not matter if the card is plugged on or off.

https://user-media-prod-cdn.itsre-sumo. … b5b590.png

Any suggests?
Thank you all in advance for your support,


moderator edit -- replaced oversized image with link.
Pasting pictures and code

Last edited by 2ManyDogs (2020-09-29 22:18:40)

Offline

#2 2020-09-29 19:50:28

Lone_Wolf
Member
From: Netherlands, Europe
Registered: 2005-10-04
Posts: 11,868

Re: Firefox is not able to find Smart Card

I think carica translates to Load  ?

If so, try the steps outlined at https://wiki.archlinux.org/index.php/Sm … la_Firefox


Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.


(A works at time B)  && (time C > time B ) ≠  (A works at time C)

Offline

#3 2020-09-30 15:12:09

AVDuma
Member
Registered: 2013-04-01
Posts: 21

Re: Firefox is not able to find Smart Card

Hi Lone_Wolf,
thank you for your reply.

It seems correctly load the CAC module as described in the wiki. If you look in the settings windows, you can see that the module seems already loaded and inside it it appears the Smart Card reader:

https://i.imgur.com/DvMV7B1.png

Offline

#4 2020-09-30 17:34:25

Lone_Wolf
Member
From: Netherlands, Europe
Registered: 2005-10-04
Posts: 11,868

Re: Firefox is not able to find Smart Card

In that case we need to determine if the problem originates from firefox or from a lower level .

You do have ccid & opensc installed and pcsd.service is active ?
If yes, install pcsc-tools and run pcsc_scan .

Details are a bit higher on the wiki page I linked in #2.


Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.


(A works at time B)  && (time C > time B ) ≠  (A works at time C)

Offline

#5 2020-09-30 18:01:15

AVDuma
Member
Registered: 2013-04-01
Posts: 21

Re: Firefox is not able to find Smart Card

I'm sorry Lone_wolf, but yes, i've installed all the packages and pcsc_scan recognise correctly the smart card:

$ pacman -Qe ccid opensc
ccid 1.4.33-1
opensc 0.20.0-1
$ sudo systemctl status pcscd
● pcscd.service - PC/SC Smart Card Daemon
     Loaded: loaded (/usr/lib/systemd/system/pcscd.service; indirect; vendor p>
     Active: active (running) since Wed 2020-09-30 16:59:10 CEST; 2h 58min ago
TriggeredBy: ● pcscd.socket
       Docs: man:pcscd(8)
   Main PID: 1757 (pcscd)
      Tasks: 7 (limit: 9411)
     Memory: 1.5M
     CGroup: /system.slice/pcscd.service
             └─1757 /usr/bin/pcscd --foreground --auto-exit

set 30 16:59:10 albi-desktop systemd[1]: Started PC/SC Smart Card Daemon.
$ pcsc_scan 
Using reader plug'n play mechanism
Scanning present readers...
0: Gemalto PC Twin Reader 00 00
 
Wed Sep 30 19:58:20 2020
 Reader 0: Gemalto PC Twin Reader 00 00
  Event number: 0
  Card state: Card inserted, 

  **Lot of numbers**

Possibly identified card (using /home/albi/.cache/smartcard_list.txt):
  **Others numbers**
	TikTok 2.0 (PKI)

Offline

#6 2020-09-30 18:34:47

progandy
Member
Registered: 2012-05-17
Posts: 5,184

Re: Firefox is not able to find Smart Card

In a cursory search I found someone talking about having to manually import the CA used to sign the smartcard certificate. Might that help?

https://support.mozilla.org/en-US/questions/1153736

Last edited by progandy (2020-09-30 18:36:30)


| alias CUTF='LANG=en_XX.UTF-8@POSIX ' |

Offline

#7 2020-10-01 17:40:43

AVDuma
Member
Registered: 2013-04-01
Posts: 21

Re: Firefox is not able to find Smart Card

Thank you progandy,
do you know how to manually import CA certificate?

Offline

#8 2020-10-01 17:44:28

progandy
Member
Registered: 2012-05-17
Posts: 5,184

Re: Firefox is not able to find Smart Card

The link does answer that.


| alias CUTF='LANG=en_XX.UTF-8@POSIX ' |

Offline

#9 2020-10-02 11:29:30

AVDuma
Member
Registered: 2013-04-01
Posts: 21

Re: Firefox is not able to find Smart Card

In the Firefox Support, an user wrote:

If you go to about:preferences#advanced > Your Certificates > select smart card certificate & view. If you see that the certificate is not trusted then you need to import the CA that signed it. Very important: check "Trust this CA to Identify Email Users.".
If you did not check this then you need to remove the CA and add it again.

The links refers probably to an old version of firefox, since there's no more a about:preferences#advanced page.
If I go to Certificates page, I can't see a section named "Your certificate" nor a "Smart Card" entry. Maybe this is the issue.

https://imgur.com/BD5cRMg.png

If I push the "Import" button, it ask me to locate a PKCS12 file that I don't know how to find in my system.

Any help will be appreciated smile

Offline

#10 2020-10-08 05:57:42

Vizitor
Member
Registered: 2015-01-05
Posts: 81

Re: Firefox is not able to find Smart Card

Maybe too late, but if anyone looking after ... :
Firefox > Upper right corner Menu > Preferences > Privacy & Security > (on the very bottom of a page) Security Devices

THERE, I have to LOAD module pkcs11 from my sotfware-provider-for-this-seq-job which is 'Middleware' (downloaded and installed from Middleware and not in Arch repos), so my path is
"/usr/lib/akd/eidmiddleware/pkcs11/libEidPkcs11.so"

Offline

#11 2020-10-08 07:45:07

AVDuma
Member
Registered: 2013-04-01
Posts: 21

Re: Firefox is not able to find Smart Card

Thank you Vizitor, but I have loaded a pkcs11 module, as described in my previous post.
Why do i need another middleware?

Offline

#12 2020-10-08 11:37:39

Vizitor
Member
Registered: 2015-01-05
Posts: 81

Re: Firefox is not able to find Smart Card

I did not understand that, all I saw B4 MY POST was:

AVDuma wrote:

Any help will be appreciated :-)

Offline

Board footer

Powered by FluxBB