[Opensc-devel] One bad PIN entry locks card

[Ernie K. <ern...@gm...>]

Hello -

We're using NSS (JSS4 and NSS 3.20) with an OpenSC 0.16.0 module to
interact with a DoD CAC. CACs will lock after 3 consecutive bad PIN
entries, of course, and we're finding that if the user enters a bad PIN
even once, that hard limit is exceeded and the card is locked.

I've substituted an ActivClient module and found that it does not lock the
card, so it seems like OpenSC is retrying with a bad PIN??

If that's true, is there a configuration item that I can set to suppress
retries in this case?

Thanks!
Ernie