1370074 - Cannot use SSCD certificate for WEBSSL via Firefox / Digital Signing via Thunderbird

Status: VERIFIED INCOMPLETE

(Core :: Security: PSM, defect)

Description

[Mosh Werner]

User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:53.0) Gecko/20100101 Firefox/53.0
Build ID: 20170518000419

Steps to reproduce:

Using my PKCS provider, I have a SSCD certificate on my smartcard.
Tried either doing WEBSSL to a specific site or sending a digitally singed email using Thunderbird.

All in all : 
1. Setup smartcard with SSCD certificate.
2. Install PKCS provider and log on the smartcard.
3. Browse secure website that requires a certificate / send an email and digitally sign him.


Actual results:

The Firefox hangs, nothing happens, it will not complete the C_Sign operation and Firefox is not responding.

On Thunderbird, message is being sent and nothing happens.


Expected results:

The WEBSSL operation should have succeed and Firefox should not have hanged / the digitally singed message should have been signed and delivered.

Comment 1

[:Gijs (he/him)]

Not a security bug that needs to stay hidden.

Comment 2

[Mosh Werner]

My bad. thanks.

Comment 3

[Dana Keeler (she/her) [:keeler]]

What device and library are you using? Do you have the most recent version of the driver software? (One thing you could try is removing the PKCS#11 module from your Firefox profile and re-loading it.)

Comment 4

[Mosh Werner]

Hi
I'm using the latest NXP's P11 and cards.

I have tried all suggestions and nothing helped.

Comment 5

[Dana Keeler (she/her) [:keeler]]

Can you download a debug version of Firefox, attach a debugger, and see where it's hanging?

Comment 6

[Mosh Werner]

Hi David.
Thanks for helping.
Apologize that I'm not sure which debugger I should use.

The tools inside Firefox cannot help me since the application hangs, so if you could assist me on producing logs, that would be  great.

From the crash report (which is too long - removed stack traces)

AdapterDeviceID: 0x29b2
AdapterDriverVersion: 8.15.10.1930
AdapterSubsysID: 4f4a8086
AdapterVendorID: 0x8086
Add-ons: aushelper%40mozilla.org:2.0,e10srollout%40mozilla.org:2.0,firefox%40getpocket.com:1.0.5,screenshots%40mozilla.org:10.10.0,webcompat%40mozilla.org:1.1,clicktoplay-rollout%40mozilla.org:1.2,followonsearch%40mozilla.com:0.9.1,shield-recipe-client%40mozilla.org:55.1,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:55.0
AddonsShouldHaveBlockedE10s: 0
AvailablePageFile: 6684835840
AvailablePhysicalMemory: 2442993664
AvailableVirtualMemory: 8794438139904
BIOS_Manufacturer: Intel Corp.
BlockedDllList: 
BreakpadReserveAddress: 54329344
BreakpadReserveSize: 67108864
BuildID: 20170803103124
CPUMicrocodeVersion: 0xb6
CTPCohort: excluded
ContentSandboxCapable: 1
ContentSandboxLevel: 1
CrashTime: 1505742285
DOMIPCEnabled: 1
E10SCohort: multiBucket1
EMCheckCompatibility: true
FramePoisonBase: 9223372036600889344
FramePoisonSize: 65536
GPUProcessStatus: Running
InstallTime: 1502200761
MozCrashReason: MOZ_CRASH(Shutdown too long, probably frozen, causing a crash.)
Notes: AdapterVendorID: 0x8086, AdapterDeviceID: 0x29b2, AdapterSubsysID: 4f4a8086, AdapterDriverVersion: 8.15.10.1930
FP(D00-L1000-W00001000-T000) DWrite? DWrite+ WR? WR- 
ProductID: {ec8030f7-c20a-464f-9b0e-13a3a9e97384}
ProductName: Firefox
ReleaseChannel: release
SafeMode: 0
SecondsSinceLastCrash: 487
ShutdownProgress: quit-application
StartupCrash: 0
StartupTime: 1505742208
SystemMemoryUsePercentage: 42
TelemetryEnvironment: {"build":{"applicationId":"{ec8030f7-c20a-464f-9b0e-13a3a9e97384}","applicationName":"Firefox","architecture":"x86-64","buildId":"20170803103124","version":"55.0","vendor":"Mozilla","platformVersion":"55.0","xpcomAbi":"x86_64-msvc","hotfixVersion":"20170302.01"},"partner":{"distributionId":null,"distributionVersion":null,"partnerId":null,"distributor":null,"distributorChannel":null,"partnerNames":[]},"system":{"memoryMB":4082,"virtualMaxMB":8388608,"cpu":{"count":4,"cores":4,"vendor":"GenuineIntel","family":6,"model":15,"stepping":11,"l2cacheKB":4096,"l3cacheKB":null,"speedMHz":2388,"extensions":["hasMMX","hasSSE","hasSSE2","hasSSE3","hasSSSE3"]},"os":{"name":"Windows_NT","version":"6.1","locale":"en-US","servicePackMajor":1,"servicePackMinor":0,"windowsBuildNumber":7601,"installYear":2016},"hdd":{"profile":{"model":"SAMSUNG HD502HJ","revision":"1AJ10001"},"binary":{"model":"SAMSUNG HD502HJ","revision":"1AJ10001"},"system":{"model":"SAMSUNG HD502HJ","revision":"1AJ10001"}},"gfx":{"D2DEnabled":false,"DWriteEnabled":true,"ContentBackend":"Skia","adapters":[{"description":"Intel(R) Q35 Express Chipset Family","vendorID":"0x8086","deviceID":"0x29b2","subsysID":"4f4a8086","RAM":null,"driver":"igdumd64 igdumdx32","driverVersion":"8.15.10.1930","driverDate":"9-23-2009","GPUActive":true}],"monitors":[{"screenWidth":1920,"screenHeight":1080,"refreshRate":60,"pseudoDisplay":false}],"features":{"compositor":"basic","gpuProcess":{"status":"available"},"d3d11":{"status":"failed"},"d2d":{"status":"blacklisted","version":"1.1"}}},"isWow64":false},"settings":{"blocklistEnabled":true,"e10sEnabled":true,"e10sMultiProcesses":1,"e10sCohort":"multiBucket1","telemetryEnabled":false,"locale":"en-US","update":{"channel":"release","enabled":false,"autoDownload":false},"userPrefs":{"app.update.auto":false,"app.update.enabled":false,"browser.cache.disk.capacity":358400,"browser.newtabpage.enhanced":true},"sandbox":{"effectiveContentProcessLevel":1},"addonCompatibilityCheckEnabled":true,"isDefaultBrowser":true,"attribution":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","medium":"referral","source":"www.google.co.il"}},"profile":{"creationDate":16937},"experiments":{"clicktoplay-rollout":{"branch":"excluded"}},"addons":{"activeAddons":{"[e-mail]":{"blocklisted":false,"description":"Staged rollout of Firefox multi-process feature.","name":"Multi-process staged rollout","userDisabled":false,"appDisabled":false,"version":"2.0","scope":1,"type":"extension","foreignInstall":false,"hasBinaryComponents":false,"installDay":17330,"updateDay":17386,"isSystem":true,"isWebExtension":false,"multiprocessCompatible":true},"[e-mail]":{"blocklisted":false,"description":"When you find something you want to view later, put it in Pocket.","name":"Pocket","userDisabled":false,"appDisabled":false,"version":"1.0.5","scope":1,"type":"extension","foreignInstall":false,"hasBinaryComponents":false,"installDay":17330,"updateDay":17386,"isSystem":true,"isWebExtension":false,"multiprocessCompatible":true},"[e-mail]":{"blocklisted":false,"description":"Sets value(s) in the update url based on custom checks.","name":"Application Update Service Helper","userDisabled":false,"appDisabled":false,"version":"2.0","scope":1,"type":"extension","foreignInstall":false,"hasBinaryComponents":false,"installDay":17332,"updateDay":17386,"isSystem":true,"isWebExtension":false,"multiprocessCompatible":true},"[e-mail]":{"blocklisted":false,"description":"Urgent post-release fixes for web compatibility.","name":"Web Compat","userDisabled":false,"appDisabled":false,"version":"1.1","scope":1,"type":"extension","foreignInstall":false,"hasBinaryComponents":false,"installDay":17332,"updateDay":17386,"isSystem":true,"isWebExtension":false,"multiprocessCompatible":true},"[e-mail]":{"blocklisted":false,"description":null,"name":"Firefox Screenshots","userDisabled":false,"appDisabled":false,"version":"10.10.0","scope":1,"type":"extension","foreignInstall":false,"hasBinaryComponents":false,"installDay":17372,"updateDay":17386,"isSystem":true,"isWebExtension":false,"multiprocessCompatible":true},"[e-mail]":{"blocklisted":false,"description":"Staged rollout for Click-to-Play Flash.","name":"Click-to-Play staged rollout","userDisabled":false,"appDisabled":false,"version":"1.2","scope":1,"type":"extension","foreignInstall":false,"hasBinaryComponents":false,"installDay":17386,"updateDay":17386,"isSystem":true,"isWebExtension":false,"multiprocessCompatible":true},"[e-mail]":{"blocklisted":false,"description":null,"name":"Follow-on Search Telemetry","userDisabled":false,"appDisabled":false,"version":"0.9.1","scope":1,"type":"extension","foreignInstall":false,"hasBinaryComponents":false,"installDay":17386,"updateDay":17386,"isSystem":true,"isWebExtension":false,"multiprocessCompatible":true},"[e-mail]":{"blocklisted":false,"description":"Client to download and run recipes for SHIELD, Heartbeat, etc.","name":"Shield Recipe Client","userDisabled":false,"appDisabled":false,"version":"55.1","scope":1,"type":"extension","foreignInstall":false,"hasBinaryComponents":false,"installDay":17386,"updateDay":17386,"isSystem":true,"isWebExtension":false,"multiprocessCompatible":true}},"theme":{"id":"{972ce4c6-7e08-4474-a285-3208198ce6fd}","blocklisted":false,"description":"The default theme.","name":"Default","userDisabled":false,"appDisabled":false,"version":"55.0","scope":4,"foreignInstall":false,"hasBinaryComponents":false,"installDay":16876,"updateDay":17386},"activePlugins":[],"activeGMPlugins":{"gmp-gmpopenh264":{"version":"1.6","userDisabled":false,"applyBackgroundUpdates":1},"gmp-widevinecdm":{"version":"1.4.8.903","userDisabled":false,"applyBackgroundUpdates":1}},"activeExperiment":{},"persona":null}}
Theme: classic/1.0
ThreadIdNameMapping: 3828:"Gecko_IOThread",3832:"Timer",3836:"Link Monitor",3840:"Socket Thread",3848:"JS Watchdog",3884:"Hang Monitor",3912:"Cache2 I/O",3952:"VsyncIOThread",3960:"Compositor",3984:"ImgDecoder #1",3988:"ImgDecoder #2",3992:"ImgDecoder #3",3996:"ImageIO",4000:"WindowsVsyncThread",4016:"GMPThread",4040:"HTML5 Parser",4044:"IPDL Background",4072:"ImageBridgeChild",396:"DOM Worker",3300:"SmartCard",3288:"SysProxySetting",3292:"ProxyResolution",3244:"SaveScripts",3248:"Cache I/O",3256:"mozStorage #1",3268:"mozStorage #2",3312:"DataStorage",3228:"URL Classifier",3224:"DNS Resolver #1",3348:"DataStorage",3352:"DataStorage",3388:"DNS Resolver #2",3384:"mozStorage #3",3372:"mozStorage #4",3412:"Classifier Update",3420:"DOM Worker",3428:"localStorage DB",3460:"mozStorage #5",3500:"Shutdown Hang Terminator",4500:"StreamTrans #4",
Throttleable: 1
TotalPageFile: 8557793280
TotalPhysicalMemory: 4279848960
TotalVirtualMemory: 8796092891136
URL: about:home
UptimeTS: 182.484541537
Vendor: Mozilla
Version: 55.0
Winsock_LSP: MSAFD Tcpip [TCP/IP] : 2 : 2 : 1 : 6 : 0x20066 : 0x8 : %SystemRoot%\system32\mswsock.dll :  : e70f1aa0-ab8b-11cf-8ca3-00805f48a192 
 MSAFD Tcpip [UDP/IP] : 2 : 2 : 2 : 17 : 0x20609 : 0x8 : %SystemRoot%\system32\mswsock.dll :  : e70f1aa0-ab8b-11cf-8ca3-00805f48a192 
 MSAFD Tcpip [RAW/IP] : 2 : 2 : 3 : 0 : 0x20609 : 0xc : %SystemRoot%\system32\mswsock.dll :  : e70f1aa0-ab8b-11cf-8ca3-00805f48a192 
 MSAFD Tcpip [TCP/IPv6] : 2 : 23 : 1 : 6 : 0x20066 : 0x8 : %SystemRoot%\system32\mswsock.dll :  : f9eab0c0-26d4-11d0-bbbf-00aa006c34e4 
 MSAFD Tcpip [UDP/IPv6] : 2 : 23 : 2 : 17 : 0x20609 : 0x8 : %SystemRoot%\system32\mswsock.dll :  : f9eab0c0-26d4-11d0-bbbf-00aa006c34e4 
 MSAFD Tcpip [RAW/IPv6] : 2 : 23 : 3 : 0 : 0x20609 : 0xc : %SystemRoot%\system32\mswsock.dll :  : f9eab0c0-26d4-11d0-bbbf-00aa006c34e4 
 RSVP TCPv6 Service Provider : 2 : 23 : 1 : 6 : 0x22066 : 0x8 : %SystemRoot%\system32\mswsock.dll :  : 9d60a9e0-337a-11d0-bd88-0000c082e69a 
 RSVP TCP Service Provider : 2 : 2 : 1 : 6 : 0x22066 : 0x8 : %SystemRoot%\system32\mswsock.dll :  : 9d60a9e0-337a-11d0-bd88-0000c082e69a 
 RSVP UDPv6 Service Provider : 2 : 23 : 2 : 17 : 0x22609 : 0x8 : %SystemRoot%\system32\mswsock.dll :  : 9d60a9e0-337a-11d0-bd88-0000c082e69a 
 RSVP UDP Service Provider : 2 : 2 : 2 : 17 : 0x22609 : 0x8 : %SystemRoot%\system32\mswsock.dll :  : 9d60a9e0-337a-11d0-bd88-0000c082e69a
useragent_locale: en-US

Comment 7

[Dana Keeler (she/her) [:keeler]]

Actually, links to any crash reports you've submitted would be helpful.

Comment 8

[Mosh Werner]

David, please let me know how can I pass the full report to you, its impossible via this form.

I'm sorry that it took so long.

Comment 9

[Dana Keeler (she/her) [:keeler]]

Sorry, I wasn't clear. Try going to about:crashes and copying/pasting links from there? (just the links, not the contents of the crash reports)
As for logging, if you go to about:config and add a string preference called "logging.config.LOG_FILE" with some file name as the value, and then add the string prefs "logging.pipnss" and "logging.certverifier" each with the value "Debug", hopefully that will give us some more information.