177319 - Cannot change order certificate devices are used

Status: VERIFIED DUPLICATE of bug 94557

(Core Graveyard :: Security: UI, defect, P3)

Description

[Mauro Cicognini]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.2b) Gecko/20021016
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.2b) Gecko/20021016

If I have the same certificate on both the Software Token and a Hardware Token
(i.e. smart card) I cannot choose which token is used.

Until 1.2a, however, the behavior was consistent:
1. Without the Hardware Token, the cert showed up as coming from the Software
Token, and when trying to use the cert Mozilla asked for the Software Token
password.
2. With the Hardware Token inserted, the cert showed up as coming from the
Hardware Token, and when trying to use the cert Mozilla asked for the Hardware
Token password. Removing the Hardware Token caused Mozilla to be unable to
access the certificate, and therefore to either display an error or to ask for a
password.

Now the behavior is as follows:
1. Without the Hardware Token, the cert shows up as coming from the Software
Token, and when trying to use the cert Mozilla asks for the Software Token
password. (NO CHANGE)
2. With the Hardware Token inserted, the cert shows up as coming from the
Hardware Token, *but* when trying to use it Mozilla asks for _both_ the Hardware
Token _and_ the Software Token password. Then it *only* uses the cert coming
from the Software Token, which in turn allows Mozilla to keep on working even if
I remove the Hardware Token. (CONFUSING)


Reproducible: Always

Steps to Reproduce:
1. Get a digital Certificate using the usual Software Token.
2. Export Cert and import it again within Hardware Token.
3. Access web site which requires Cert to authenticate.

Actual Results:  
Certificate Manager shows Cert as coming from Hardware Token, then asks for
password for both Hardware and Software Tokens (in this order).
Authentication is successful, but Mozilla keeps on displaying pages even after
removal of the Hardware Token.

Expected Results:  
Display error message upon removal of Hardware Token.

OR

Show Cert as coming from Software Token.

Comment 1

[John Unruh]

The fact that Mozilla asks for both the Hardware Token and the Software Token
passwords is as expected. The fact that Mozilla keeps on displaying pages even
after removal of the Hardware Token is a bug. Marking duplicate of bug 94557.

*** This bug has been marked as a duplicate of 94557 ***

Comment 2

[John Unruh]

V