1209076 - PKCS11 renegotiation

Status: UNCONFIRMED

(NSS :: Libraries, defect, P3)

Description

[tomato1090]

User Agent: Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0
Build ID: 20150922120153

Steps to reproduce:

I created a csr and signed the certificate with self-signed CA.
I imported the certificate and key on my smartcard (epass2003)
I loaded the pkcs11 module into firefox


Actual results:

When I connect to my website, firefox asks for my pin and propose me my certificate
After a while (5min) that seems to be the renegotiation, I get SSL_ERROR_SIGN_HASHES_FAILURE and firefox doesn't ask for certificate selection or whatever.
I need to close firefox and reopen it to be asked again pin and certificate picking.


Expected results:

Firefox should use the certificate I choose when first connection to the website as it does when the certificate is stored on local keystore.