1338821 - Smartcard removal is not properly detected by Firefox

Status: RESOLVED INVALID

(Core :: Security: PSM, defect, P5)

Description

[Graham Leggett]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:51.0) Gecko/20100101 Firefox/51.0
Build ID: 20170125094131

Steps to reproduce:

When an attempt is made to insert a smartcard using the OpenSC PKCS11 module, the certificates and keys on the smartcard are available and work correctly.

When the smartcard is removed however, Firefox does not notice the removal of the smartcard and still asks for the smartcard PIN and lists the certificates on the smartcard.


Actual results:

After removal of the smartcard, the following happens shortly afterwards:

- Firefox will ask for the PIN of the smartcard, even though this smartcard is no longer plugged in.

- Firefox will list the certificates on the smartcard, even though these certificates are no longer available.


Expected results:

Firefox must not ask for the PIN of a smartcard that is not plugged into Firefox at the time.

Firefox must not list certificates from a smartcard that is no longer plugged in.

Comment 1

[Graham Leggett]

Attachment: Image grab of the PIN entry dialog - "Keys of Doom" is not plugged in at this time.

PIN entry dialog asking for the smartcard PIN while the smartcard is not plugged in.

Comment 2

[Graham Leggett]

Attachment: Image grab of the preferences dialog showing the smartcard while unplugged

While the smartcard is unplugged, the smartcard "Keys of Doom" is still listed in the preferences dropdown, even though this smartcard is no longer plugged in.

Comment 3

[Dana Keeler (she/her) (use needinfo) [:keeler]]

What version of OpenSC are you using?

Comment 4

[Graham Leggett]

This was thought to be OpenSC 0.16.0, but turned out to be a build of OpenSC 0.16.0 from start of Jan. A rebuild of git master of OpenSC has solved the problem.