Nexus Personal / BankID Doesn't work on several sites

VERIFIED FIXED in Firefox 28

Status

()

Core
Plug-ins
--
major
VERIFIED FIXED
4 years ago
4 years ago

People

(Reporter: Cork, Assigned: cpeterson)

Tracking

({regression})

Trunk
mozilla28
regression
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(firefox27 unaffected, firefox28+ verified)

Details

Attachments

(1 attachment)

(Reporter)

Description

4 years ago
Affected sites:
handelsbanken.se
seb.se
swedbank.se

These sites have problems with the blocker so I'm going to contact them anyway. The problem is bankID is very commonly used here and I don't know all the sites that use it.

Many sites use funktionstjanster.se and all of them works even after bug 757726 landed.

----------------------------------------------------------------------
BankID/Nexus Personal
http://bankid.com/
----------------------------------------------------------------------
Nexus Personal
    File: np_prsnl.dll
    Path: C:\Program Files (x86)\Personal\bin\np_prsnl.dll
    Version: 4.20.12127
    State: Enabled
    Nexus Personal Plug-Ins

MIME Type                               Description
application/x-personal-signer           Signer
application/x-personal-regutil          Enrolment
application/x-personal-logout           Logout
application/x-personal-version          Version
application/x-personal-webadmin         WebAdmin
application/x-personal-authentication   Authentication
application/x-personal-signer2          Signer2
-------------------------------------------------------

----------------------------------------------------------------------
Fribid open source implementation of Nexus Personal for linux support
http://www.fribid.se/
----------------------------------------------------------------------
Nexus Personal
    File: libfribidplugin.so
    Path: /usr/lib/fribid/libfribidplugin.so
    Version: 1.0.2
    State: Enabled
    FriBID version 1.0.2

MIME Type                               Description
application/x-personal-version          Version
application/x-personal-authentication   Authentication
application/x-personal-signer2          Signer2
application/x-personal-regutil          Regutil
application/x-personal-webadmin         Webadmin
application/x-personal-signer           Signer
-------------------------------------------------------
(Reporter)

Updated

4 years ago
Blocks: 757726
(Reporter)

Comment 1

4 years ago
The three sites i mentioned in comment 0has been contacted with links to this bug and some have gotten additional links for the plugin blocking in ff 25.

Updated

4 years ago
Blocks: 934107

Comment 2

4 years ago
Please see bug 934107 for instructions how to fix this on the website.

Comment 3

4 years ago
We aren't realistically going to get these sites to fix this in the next 10-12 weeks. We should add the BankID plugin to the whitelist for now. BankID 2.0 which doesn't need plugins will ship sometime next year and we can revisit.
Assignee: nobody → cpeterson
status-firefox27: --- → unaffected
tracking-firefox28: --- → +
(Assignee)

Updated

4 years ago
Severity: normal → major
Status: NEW → ASSIGNED
Keywords: regression
(Assignee)

Comment 4

4 years ago
Created attachment 8337558 [details] [diff] [review]
942587.patch

I whitelisted the "Nexus Personal" plugin name, but I do not have the BankID plugin to actually verify that I've fixed the sites.
Attachment #8337558 - Flags: review?(benjamin)

Comment 5

4 years ago
Comment on attachment 8337558 [details] [diff] [review]
942587.patch

BankID itself is Java, so I think we're fine.
Attachment #8337558 - Flags: review?(benjamin) → review+
(Reporter)

Comment 6

4 years ago
No that data is old, here bankID only depends on the nexus plugin and javascript.
https://hg.mozilla.org/mozilla-central/rev/5500b340e6f9
Status: ASSIGNED → RESOLVED
Last Resolved: 4 years ago
status-firefox28: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla28

Comment 9

4 years ago
Cork, could you please file an tech evang bug (see bug 934108 for an example; make it a blocker of bug 934107), and so that this gets fixed on their side (Nexus and/or banks)? Thanks.
(Reporter)

Updated

4 years ago
Blocks: 947629
(Reporter)

Updated

4 years ago
Blocks: 947631
(Reporter)

Updated

4 years ago
Blocks: 947635
(Reporter)

Comment 10

4 years ago
Sorry for the delay, I've been very busy the last week+. Hope they are good enough.

Comment 11

4 years ago
Thank you! Appreciated.
Cork, apart from the tech evang issues, is this resolved for you now?
Flags: needinfo?(cork)
(Reporter)

Comment 13

4 years ago
Yes everything works as expected on these sites with:
Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0
Status: RESOLVED → VERIFIED
Flags: needinfo?(cork)
(Reporter)

Comment 14

4 years ago
Uh that wasn't nearly as specific as i meant to be...

http://hg.mozilla.org/mozilla-central/rev/3c44c1f43a67
Thanks Cork.
status-firefox28: fixed → verified
You need to log in before you can comment on or make changes to this bug.