1410867 - pin code of pkcs11 module requested multiple time when module is shared with another application

Status: UNCONFIRMED

(NSS :: Libraries, defect, P3)

Description

[david.leruse]

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:56.0) Gecko/20100101 Firefox/56.0
Build ID: 20170926190823

Steps to reproduce:

I've a client-cert protected internal website working with the pkcs11 belgian eid and it's auth certificate.Browsing through all the pages with it works very well :  pin code of the module is requested only at the beginning of the navigation.
But  when i launch outside of firefox, a java vm (8) using the same pkcs11 module and the same belgian eid for another kind of cryptographic work, things got weird for firefox 


Actual results:

After this point, Firefox will request the pin code of the pkcs11 belgian module for each subsequent request    


Expected results:

Firefox shouldn't ask the pkcss11 module pin code for each request

Comment 1

[david.leruse]

In fact, i've made other tests and this behaviour occurs with java application using Windows Crypto API or using direct apdu. In case of sharing, NSS seems to invalidate the firefox ssl session.