Re: [Opensc-devel] opensc-pkcs11 in FireFox conflicting with closed-source PKCS11 provider

[Douglas E. E. <dee...@an...>]

On 7/17/2013 3:27 AM, Alex Samorukov wrote:
> Hi,
>
> I am using OpenSC and pkcs11 with firefox to access some websites using
> my personal certificate and it works pretty well. But also i do have a
> cart with proprietary pkcs11 driver. It works fine if FireFox is closed,
> but if it is running it waits forever, probably trying to get exclusive
> access. This card is not supported by OpenSC project, so for me it is a
> little unclear why this happens. It seems that this provider is trying
> to get some kind of exclusive access to pcscd and failing if it is not
> possible.

Do you have both OpenSC PKCS#11 and the vendor's PKCS#11 libs/dlls
loaded as "Security Devices" in FireFox?

What order?

If both are defined, and the card is inserted, what does the
FireFox-> options-> Advanced-> Security Devices show for each of
the loaded PKCS#11 modules?

>
> Is it possible somehow to tell OpenSC to completely ignore this card
> based on it ATR? Or any other recommendations to prevent this issue,
> e.g. prevent firefox from auto scan? I am ready to send all the patches
> if needed.

An OpenSC trace, by changing the debug= in the opensc.conf would also help.
It sounds like OpenSC is trying to determine if it can support the card.
It would help show where OpenSC is failing to get access to the card.

Your suggestion of a list of ATRs to ignore is an excellent idea.
It could solve your problem, as well as allow NSS to use of a vendor's PKCS#11
even if the card is supported by OpenSC.

>
>
> ------------------------------------------------------------------------------
> See everything from the browser to the database with AppDynamics
> Get end-to-end visibility with application monitoring from AppDynamics
> Isolate bottlenecks and diagnose root cause in seconds.
> Start your free trial of AppDynamics Pro today!
> http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
> _______________________________________________
> Opensc-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/opensc-devel
>

-- 

  Douglas E. Engert  <DEE...@an...>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444