942587 - Nexus Personal / BankID Doesn't work on several sites

Status: VERIFIED FIXED

(Core Graveyard :: Plug-ins, defect)

Description

[Cork]

Affected sites:
handelsbanken.se
seb.se
swedbank.se

These sites have problems with the blocker so I'm going to contact them anyway. The problem is bankID is very commonly used here and I don't know all the sites that use it.

Many sites use funktionstjanster.se and all of them works even after bug 757726 landed.

----------------------------------------------------------------------
BankID/Nexus Personal
http://bankid.com/
----------------------------------------------------------------------
Nexus Personal
    File: np_prsnl.dll
    Path: C:\Program Files (x86)\Personal\bin\np_prsnl.dll
    Version: 4.20.12127
    State: Enabled
    Nexus Personal Plug-Ins

MIME Type                               Description
application/x-personal-signer           Signer
application/x-personal-regutil          Enrolment
application/x-personal-logout           Logout
application/x-personal-version          Version
application/x-personal-webadmin         WebAdmin
application/x-personal-authentication   Authentication
application/x-personal-signer2          Signer2
-------------------------------------------------------

----------------------------------------------------------------------
Fribid open source implementation of Nexus Personal for linux support
http://www.fribid.se/
----------------------------------------------------------------------
Nexus Personal
    File: libfribidplugin.so
    Path: /usr/lib/fribid/libfribidplugin.so
    Version: 1.0.2
    State: Enabled
    FriBID version 1.0.2

MIME Type                               Description
application/x-personal-version          Version
application/x-personal-authentication   Authentication
application/x-personal-signer2          Signer2
application/x-personal-regutil          Regutil
application/x-personal-webadmin         Webadmin
application/x-personal-signer           Signer
-------------------------------------------------------

Comment 1

[Cork]

The three sites i mentioned in comment 0has been contacted with links to this bug and some have gotten additional links for the plugin blocking in ff 25.

Comment 2

[Ben Bucksch (:BenB)]

Please see bug 934107 for instructions how to fix this on the website.

Comment 3

[Benjamin Smedberg]

We aren't realistically going to get these sites to fix this in the next 10-12 weeks. We should add the BankID plugin to the whitelist for now. BankID 2.0 which doesn't need plugins will ship sometime next year and we can revisit.

Comment 4

[Chris Peterson [:cpeterson]]

Attachment: 942587.patch

I whitelisted the "Nexus Personal" plugin name, but I do not have the BankID plugin to actually verify that I've fixed the sites.

Comment 5

[Benjamin Smedberg]

Comment on attachment 8337558 [details] [diff] [review]
942587.patch

BankID itself is Java, so I think we're fine.

Comment 6

[Cork]

No that data is old, here bankID only depends on the nexus plugin and javascript.

Comment 7

[Chris Peterson [:cpeterson]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/5500b340e6f9

Comment 8

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/5500b340e6f9

Comment 9

[Ben Bucksch (:BenB)]

Cork, could you please file an tech evang bug (see bug 934108 for an example; make it a blocker of bug 934107), and so that this gets fixed on their side (Nexus and/or banks)? Thanks.

Comment 10

[Cork]

Sorry for the delay, I've been very busy the last week+. Hope they are good enough.

Comment 11

[Ben Bucksch (:BenB)]

Thank you! Appreciated.

Comment 12

[u279076]

Cork, apart from the tech evang issues, is this resolved for you now?

Comment 13

[Cork]

Yes everything works as expected on these sites with:
Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0

Comment 14

[Cork]

Uh that wasn't nearly as specific as i meant to be...

http://hg.mozilla.org/mozilla-central/rev/3c44c1f43a67

Comment 15

[u279076]

Thanks Cork.