506974 - Firefox does not support changing the PKCS#11 token password via pinpad

Status: RESOLVED INCOMPLETE

(Firefox :: General, defect)

Description

[Martin Paljak]

User-Agent:       Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_7; et-ee) AppleWebKit/530.19.2 (KHTML, like Gecko) Version/4.0.2 Safari/530.19
Build Identifier: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; et; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1

Instead, it presents a GUI based PIN entry window. If you don't enter anything in the fields and press "change PIN", it asks from the pinpad for the entry of the PIN to be changed and after that starts the PIN change procedure itself, also on the pinpad. Apparently Firefox calls C_Login(NULL) followed with C_SetPIN(NULL). I guess C_Login before changing the PIN is not required.

Reproducible: Always

Steps to Reproduce:
1. Use a PKCS#11 provider with a pinpad card reader, like OpenSC with SCM SPR532
2. Go to preference -> advanced -> encryption -> security devices
3. Select your token/slot and press "change password"
Actual Results:  
A window pops up with three entry fields for old PIN, and 2x new PIN

Expected Results:  
A message box similar to what happens when you click "log in", instructing the user to change the PIN on the reader pinpad.

Comment 1

[Tyler Downer [He/Him]]

Reporter, are you still seeing this issue with Firefox 3.6.13 or later in safe mode? If not, please close. These links can help you in your testing.
http://support.mozilla.com/kb/Safe+Mode
http://support.mozilla.com/kb/Managing+profiles

You can also try to reproduce in Firefox 4 Beta 8 or later, there are many improvements in the new version, http://www.mozilla.com/en-US/firefox/all-beta.html

Comment 2

[Martin Paljak]

I will test shortly with Firefox 4 beta, but last time I checked nothing had changed.

Comment 3

[Tyler Downer [He/Him]]

No reply, INCOMPLETE. Please retest with Firefox 3.6.13 or later and a new profile (http://support.mozilla.com/kb/Managing+profiles). If you continue to see this issue with the newest firefox and a new profile, then please comment on this bug.