Issue 39448 - Digital Signatures with SmartCard don't work on Linux/Solaris
Summary: Digital Signatures with SmartCard don't work on Linux/Solaris
Status: CLOSED FIXED
Alias: None
Product: General
Classification: Code
Component: code (show other issues)
Version: 680m66
Hardware: All All
: P3 Trivial (vote)
Target Milestone: OOo 2.0
Assignee: frank
QA Contact: issues@framework
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-12-22 12:09 UTC by malte_timmermann
Modified: 2005-03-31 14:38 UTC (History)
2 users (show)

See Also:
Issue Type: DEFECT
Latest Confirmation in: ---
Developer Difficulty: ---


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description malte_timmermann 2004-12-22 12:09:08 UTC
Currently we only use the first keystore we find in NSS solution
Comment 1 mci 2004-12-22 12:51:17 UTC
*** Issue 39382 has been marked as a duplicate of this issue. ***
Comment 2 mmi 2005-01-24 02:53:32 UTC
Hi, Malte,

Chandler and I have committed the fix to the xmlsec08. 

Because we can't test it in the real smartcard device, so I'm afraid that I can
only reassign it to you, instead of marking it as fixed. Sorry. ;-)

Michael
Comment 3 Roberto Salomon 2005-01-24 08:09:54 UTC
If there is an interim test build, I could help in the testing for access to a
USB token. Otherwise, it's sit and wait for the next m680 snapshot.
Comment 4 malte_timmermann 2005-01-25 14:32:40 UTC
rfsalomon,

thanks for that :)

There are some incompatible changes in xmlsec08, so I don't have a build for that.
Would be good if you could confirm when xmlsec08 is integrated (will take some
weeks because of open issues).
Comment 5 malte_timmermann 2005-02-25 10:55:24 UTC
MT->FST: We don't have the SmartCard anymore, so I suggest we hope it work, 
and let rfsalomon test in master.

If it doesn't - we don't loose anything...

re-open issue and try to reassign to fst
Comment 6 malte_timmermann 2005-02-25 10:55:29 UTC
try to reassign to fst
Comment 7 malte_timmermann 2005-02-25 10:55:36 UTC
try to reset resolution to FIXED
Comment 8 Roberto Salomon 2005-02-25 11:01:36 UTC
I'm available and eager to test. Just let me know when the build is ready.
Tested it on Pavel's m80 build1 but it seems the fix is still not there. I'll
wait for the next build (m81?) to repeat the test.
Comment 9 malte_timmermann 2005-02-25 11:07:43 UTC
Wow, quick response :)

Will be in the master when CWS xmlsec08 is integrated, which might be m83.
Comment 10 Roberto Salomon 2005-02-25 12:02:35 UTC
:) I'm monitoring this issue closely since Digital Signatures are quickly
becoming a big issue here in Brazil with the Federal Government's new guidelines
for electronic documents.
Comment 11 Roberto Salomon 2005-03-04 21:30:19 UTC
Downloaded Pavel's m83 build and it seems that the fix didn't make it there...
Still waiting.
Comment 12 frank 2005-03-09 11:37:14 UTC
No bugs found so far, no bad effects discovered.
Comment 13 frank 2005-03-09 11:37:59 UTC
forgot to mention there it was tested. CWS xmlsec08
Comment 14 Roberto Salomon 2005-03-16 12:34:55 UTC
Downloaded and tested with m86 build. Couldn't test the functionality because
m86 is unable to find a mozilla user profile. Previous builds were able to find
the user profile without any extra configuration. Is any environment setting
required for m86 to find a valid mozilla profile?

My environment:

SuSE Linux 9.2
Mozilla 1.7.5
MOZILLA_FIVE_HOME=/opt/mozilla/lib
Comment 15 Roberto Salomon 2005-03-30 22:12:21 UTC
Attempted to open a new issue per Michael Mi's reccomendation. Since the issue
was closed as a duplicate, I'm copying the text over here. I thing this issue
should be reopened.

Once a certificate is stored in Mozilla's Software Security Device, I am able to
sign documents using it. However, certificates stored in hardware devices, such
as a USB Token, are not accessed even though they are correctly configured in
Mozilla and can be used by it to sign e-mails. Since these certificates stored
in hardware are usable in Evolution through libnss, I assume that OOo has still
to implement the interface to access these devices. Is this currently a
restriction or are there plans to implement access to hardware devices though
libnss?

Environment: SuSE Linux 9.2, Java 1.5.0, OOo 2.0 (1.9 m65)

eAladdin eToken Pro
Comment 16 frank 2005-03-31 14:38:32 UTC
No side effects discovered for the fix so found integrated on Master SRC680 m89