Closed Bug 501484 Opened 17 years ago Closed 10 years ago

Firefox 3.5 hangs when use client authentication with certificate in smartcard in Vista

Categories

(Core :: Security: PSM, defect)

Product:
Core
Component:
Security: PSM
Version:
1.9.1 Branch
Platform:
x86
Windows Vista
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INCOMPLETE

People

(Reporter: jamador, Unassigned)

References

(
URL
)

Details

(Keywords: hang, Whiteboard: [psm-fatal][psm-auth])

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; es-ES; rv:1.9.1) Gecko/20090624 Firefox/3.5 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; es-ES; rv:1.9.1) Gecko/20090624 Firefox/3.5 In any page that uses client authentication with certificate in smartcard in firefox 3.5 hangs after asking for the PIN, even if you press cancel. I tried 8 different pages, and several models of cards (Siemens, G & D). In firefox 3.0.11 was working properly. The certificate selection was in always ask Reproducible: Always Steps to Reproduce: 1. Go to any page with client authentication 2. When it asks the smartcard PIN, write it and press OK 3. Actual Results: Firefox hangs Expected Results: Show certificate selection window The OS is Windows Vista
Can you try in Safe Mode?
Version: unspecified → 3.5 Branch
Severity: critical → major
Keywords: hang
Yes. The same result.
could be related to bug 495284
Assignee: nobody → kaie
Component: Security → Security: PSM
Product: Firefox → Core
QA Contact: firefox → psm
Version: 3.5 Branch → 1.9.1 Branch
Can not confirm. Maybe tries to validate with OCSP or CRL and can't?
I tried it without validating OCSP. Furthermore, with the 3.0.11 and the same setup works.
No change in behavior when disabling OCSP? That's odd, I guess more details are needed in order to reproduce this alleged problem.
No problem. What else do you need? I find it odd too but I tested with two different computers and several cards.
Did you try on other systems than Vista? I hope Kai can help you with debugging.
I tried with update 3.5.1 and the same result. The bug still remains. When the program is frozen does not generate crash reports. I don't know if I can send you other useful information. Someone was able to replicate it?
Which PKCS#11 provider do you use?
I use G&D A.E.T. (aetpkss1.dll) and Siemens CardOS API 3.2 (siecap11.dll).
Blocks: clientauth
I think the amount of testing performed justifies to set this to confirmed. So we have a regression with smartcards in Firefox 3.5? I don't remember a lot of new features in firefox 3.5 related to smartcards, so maybe this has to do with the NSS version used internally by Firefox?
Status: UNCONFIRMED → NEW
Ever confirmed: true
I've seen this behavior with a dirty smart card on Linux too. Cleaning the card solved the problem.
I tried with ten cards so i don´t think that cleaning cards resolve the issue. With the 3.5.2 the problema persist when there are defined several hardware cryptographic devices.
(In reply to comment #14) > With the 3.5.2 the problema persist when there are defined several hardware > cryptographic devices. Can you provide some more information, about which combination of devices you have, how many configured in Firefox etc.? I think you mentioned something important at the previous post.
Yes. In #11 commented that "I use G&D A.E.T. (aetpkss1.dll) and Siemens CardOS API 3.2 (siecap11.dll)". I also tested with the provider of the Spanish ID card (UsrPKCS11.dll).
I meant, do you use multiple devices? Do you have many devices configured in Firefox? You mentioned several devices in comment 14.
I use multiple cryptographic providers for multiple smartcards. What I mean is that I have configured multiple pkcs11 in security devices.
Thanks. Did you try with a clean profile and only the problematic device? @Kai, is there a way to debug it from the command line?
Severity: major → critical
Assignee: kaie → nobody
Whiteboard: [psm-fatal][psm-auth]
I see only one approach to debugging this: - get help from a developer locally - install a development environment on a machine that is set up to use your particular smartcard hardware - produce a debug build of Firefox - run Firefox and reproduce the hang - when Firefox hangs, use the developer tools to "break" into the application - inspect the "caller stack" and report it here
Is this still an issue?
Flags: needinfo?(jamador)
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → INCOMPLETE

Clearing the needinfo request since this bug has been closed as INCOMPLETE for 10 years, 3 months and 29 days.

For more information, please visit BugBot documentation.

Flags: needinfo?(jamador)
You need to log in before you can comment on or make changes to this bug.