Bug 474840

Summary:	Automatically selecting certificate fails
Product:	[Fedora] Fedora	Reporter:	eric
Component:	firefox	Assignee:	Gecko Maintainer <gecko-bugs-nobody>
Status:	CLOSED UPSTREAM	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	low
Version:	10	CC:	gecko-bugs-nobody, mcepl, walters
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2008-12-05 21:34:09 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description eric 2008-12-05 15:53:24 UTC

Description of problem: I use a CAC (smart) card to log into various .mil sites.  If I have my firefox preferences (Advanced -> Encryption) set to "Select one automatically" then I presume Firefox is selecting the inappropriate certificate as the site will fail.  On the other hand, if I select "Ask me every time" it will prompt me for which key I want to use (always the second one on the list) it will properly authenticate but will ask me a dozen times (or more) which key I need as it loads different portions of the page.

I have found that if I have my preferences open at the time I load the page I can manually select the key and then quickly select "Select one automatically" and it will work properly.  While this is an inconvenience, it is a pain to do and I'll have other "non-geeks" using this solution very soon.  Is there something I'm not doing correctly?


Version-Release number of selected component (if applicable):
In Fedora: firefox-3.0.4-1.fc10
In RHEL5: firefox 3 beta 5

How reproducible: Always


Steps to Reproduce:
1. Insert CAC card into reader.
2. Start Firefox
3. Go to DoD URL
  
Actual results: Authentication Fails


Expected results: Authentication success!


Additional info: I'm seeing this problem in Fedora 9, Fedora 10, and RHEL 5.2.

Comment 1 eric 2008-12-05 15:59:38 UTC

Also opened a Mozilla ticket.

Comment 2 Matěj Cepl 2008-12-05 21:34:09 UTC

We believe that it is more appropriate to let this bug be resolved upstream.

Red Hat will continue to track the issue in the centralized upstream bug tracker, and will review any bug fixes that become available for consideration in future updates.

Thank you for the bug report.