On 10/3/2013 10:51 AM, Howdy Dood wrote:
Hello,

I have Fedora 19 on two machines.

I use libcoolkey to use a Common Access Card's certificates to access my webmail at http://www.foo.bar.gov

However, since upgrading to F19 on machine two, although I am prompted for pin, etc, and certs show, and I can choose the right cert, I get:
"
The connection was reset

The connection to the server was reset while the page was loading."

and on a related site, I get:

"Unable to load the webpage because the server sent no data.
Error code: ERR_EMPTY_RESPONSE"

On machine one, it works fine.  I cannot figure out what the problem is here.  Same version of pcsc, same version of libcoolkey... on machine 2, both firefox and chrome have this problem.

Both machines are on the same network.

On machine two, if I open up virtualbox and go to win8, and use CaC there, I can access the site with IE.

Any site that requires email signature certificate on card has this problem.  If the site requires digital ID certificate, it still works fine.

That sounds like the old version was caching the pin, and new version is not, or not caching it correctly.

For PIV  cards, (and all newer CAC cards are  both)  when the signature key is used to do a crypto
operation, the previous operation to the card must have been a verify i.e. PIN is sent.

You can run pcscd in debug mode, and watch the commands to the card to get some  more information.

And as a previous responder said, it could be because the *.gov web site  is down...



Thanks for help


_______________________________________________
Muscle mailing list
Muscle@lists.musclecard.com
http://lists.musclecard.com/mailman/listinfo/muscle_lists.musclecard.com

-- 

 Douglas E. Engert  <deeng...@anl.gov>
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439 
 (630) 252-5444
_______________________________________________
Muscle mailing list
Muscle@lists.musclecard.com
http://lists.musclecard.com/mailman/listinfo/muscle_lists.musclecard.com

Reply via email to