2008572 - unable to use my CIE electronic identity card,latest vers 1.4.3.12, with firefox 146.0.1

Status: UNCONFIRMED

(Core :: Security: PSM, defect)

Description

[Gio]

Attachment: ciepki.dll loaded in certificates

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0

Steps to reproduce:

tried to identify me here:
https://sportello.harnekinfo.it/Login.aspx?A=SA
with my CIE,electronic identity card
and its badge
the program is CIE Middleware 1.4.3.12 and put
CIEPKI.dll in windows\system32

Actual results:

when the certificate appears i click on ok but the page remains in loop and then i got "time expired"

Expected results:

i should have been able to log in as i easly do using edge or chrome

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::Security: PSM' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[Dana Keeler (she/her) [:keeler]]

If you remove CIEPKI.dll from the device manager in Firefox, does it work?

Comment 3

[Gio]

Hi Dana, first let me thxs you for yr kind attention ,
also if i remove the CIEPKI.dll from the device manager
it doesn't work
i first tried without upload it,the ciepki.dll, in the device manager cause i know that from mozilla vers 90
it wasn't needed cause as i've understood from that vers.90 , and i have the latest 146.0.1,
the behaviour of firefox should be exactly the same as chrome or edge
but in my case did not work
so i tried to upload the module ,with CIEPKI.dll,in the device manager
but still doesn't work.
again thxs you so much for yr attention and yr helping for me is very very important.
cheers

Comment 4

[Dana Keeler (she/her) [:keeler]]

Without CIEPKI.dll, if you look at your certificates in Firefox (about:preferences -> Privacy & Security -> View Certificates -> Your Certificates), do you see your certificate?

Did earlier versions of Firefox work?

Comment 5

[Gio]

Hi Dana thxs so much again
yes i see the certificate
here it is:
https://i.postimg.cc/fbmrz8gc/Immagine.jpg
is the one under "Ministero dell'Interno"
infact when i try to log in for example at this site:
https://sportello.harnekinfo.it/Login.aspx?A=SA
the certificate with all my correct datas as name surname fiscal code and expiry date
appears at my window's desktop but when i click to send it
the webpage remains in charges for lot of time then i got time out...

this is the first time i use my CIE, in the past i used the CNS which is another system identification with another badge
and another dll, this: stPKCS11.dll but in the recents firefox versions i do not need to upload the relative module in device manager
as i did before ff vers 90, when i enter a site with that kind of authentication,the CNS card, i simply see its certificate
which is the one under "Infocert Spa" of my above picture
i click to send it , then it appears the pop up window to insert its Pin, i did and all is ok
but for the site i've linked above:
https://sportello.harnekinfo.it/Login.aspx?A=SA
the CNS is not suitable and i have to use the CIE card with its badge
if i do this with chrome or edge its behaviour is the same as i described for the CNS in firefox
but if i try to log in with CIE+ Firefox i got the bug showed.
hope this helps you
apologize for my few skills
thxs so much again for yr attn
yr helping for me is fundamental
thxs from the deep of my heart
cheers

Comment 6

[Gio]

[url=https://postimg.cc/Z9Ycjxmn][img]https://i.postimg.cc/Z9Ycjxmn/Immagine.jpg[/img][/url]

Comment 7

[Gio]

i uploaded the right image of my certificates:
https://i.postimg.cc/fbmrz8gc/Immagine.jpg