Douglas, thanks, but as I said, it works on the exact same site with
another machine.  The site is not down.  I'm using it right now through
virtualbox with windows 8.

It seems to only have the problem when using the email certificate, but not
the digital signature certificate(those sites work).


On Thu, Oct 3, 2013 at 12:16 PM, Douglas E. Engert <deeng...@anl.gov> wrote:

>
> On 10/3/2013 10:51 AM, Howdy Dood wrote:
>
> Hello,
>
>  I have Fedora 19 on two machines.
>
>  I use libcoolkey to use a Common Access Card's certificates to access my
> webmail at http://www.foo.bar.gov
>
>  However, since upgrading to F19 on machine two, although I am prompted
> for pin, etc, and certs show, and I can choose the right cert, I get:
> "
>  The connection was reset
>
>  The connection to the server was reset while the page was loading."
>
>  and on a related site, I get:
>
>  "Unable to load the webpage because the server sent no data.
> Error code: ERR_EMPTY_RESPONSE"
>
>  On machine one, it works fine.  I cannot figure out what the problem is
> here.  Same version of pcsc, same version of libcoolkey... on machine 2,
> both firefox and chrome have this problem.
>
>  Both machines are on the same network.
>
>  On machine two, if I open up virtualbox and go to win8, and use CaC
> there, I can access the site with IE.
>
>   Any site that requires email signature certificate on card has this
> problem.  If the site requires digital ID certificate, it still works fine.
>
>
> That sounds like the old version was caching the pin, and new version is
> not, or not caching it correctly.
>
> For PIV  cards, (and all newer CAC cards are  both)  when the signature
> key is used to do a crypto
> operation, the previous operation to the card must have been a verify i.e.
> PIN is sent.
>
> You can run pcscd in debug mode, and watch the commands to the card to get
> some  more information.
>
> And as a previous responder said, it could be because the *.gov web site
> is down...
>
>
>
>
>  Thanks for help
>
>
> _______________________________________________
> Muscle mailing 
> listMuscle@lists.musclecard.comhttp://lists.musclecard.com/mailman/listinfo/muscle_lists.musclecard.com
>
>
> --
>
>  Douglas E. Engert  <deeng...@anl.gov> <deeng...@anl.gov>
>  Argonne National Laboratory
>  9700 South Cass Avenue
>  Argonne, Illinois  60439
>  (630) 252-5444
>
>
> _______________________________________________
> Muscle mailing list
> Muscle@lists.musclecard.com
> http://lists.musclecard.com/mailman/listinfo/muscle_lists.musclecard.com
>
>
_______________________________________________
Muscle mailing list
Muscle@lists.musclecard.com
http://lists.musclecard.com/mailman/listinfo/muscle_lists.musclecard.com

Reply via email to