309342 - Allow to (temporarily) disable 'Security Modules and Devices' / pkcs11

Status: RESOLVED WONTFIX

(Core Graveyard :: Security: UI, enhancement)

Description

[Ralf Hauser]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 (No IDN) Firefox/1.0.6
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 (No IDN) Firefox/1.0.6

It appears that different USB PCKS11 devices' DLLs interfere with each other.
I have both a
http://charismathics.com/products/1for_business_customers/3plug--in--icrypt.php
(Eutron cmP11.dll) stick and a USB-Enabled RSA SecurID SID800 Token (pkcs11.dll).

When putting in the RSA token, as per the screenshot attached next, when having
the charismatics Device in first position and sticking the RSA stick into the
USB, accessing the Tools->Options menu or sometimes opening https page become
very slow, the browser almost appears to hang.

Unfortunately, I can only delete (strange name 'Unload') and not disable a
device (and if I delete a device, the refresh mixes up which devices are left as
per Bug 244743).
At least, if I do that, the options menu opens quickly again.

Reproducible: Always

Actual Results:  
must unload whereby you forget which DLL was used

Expected Results:  
can temporarily disable

Comment 1

[Ralf Hauser]

Attachment: InterferingPkcs11Devices.png

Comment 2

[Ralf Hauser]

similarly, if there is only the Eutron Security Device Manager (despite its driver software uninstalled) - all of a suddon no built-in root certificates are found anymore.

Removing the '"dangling" Security Device' fixes that problem.

Comment 3

[Kai Engert (:KaiE:)]

Mass change owner of unconfirmed "Core:Security UI/PSM/SMime" bugs to nobody.
Search for kaie-20100607-unconfirmed-nobody

Comment 4

[Dana Keeler (she/her) (use needinfo) [:keeler]]

As far as I know, NSS does not provide the ability to disable a module. An add-on could fake this by unloading the module but keeping track of the location on disk so it can be easily reloaded. Use of these modules is rare enough that we won't be devoting resources to fixing these sorts of bugs.