I'm making the following 2 assumptions from your description:

1) You are able to get to DoD sites on linux with your CAC card. --- and -- 2) You are able to get to DoD and navy.mil on Windows with your CAC cards.

If this is the case, then it might a problem with some missing intermediate certificates on Linux. The navy site may be presenting a set of root certs which it accepts for SSL client auth. IE ignores that list and looks for all your user certs and asks which you want to use. FF looks for certs that chain to your client auth certificate. If you don't have the intermediates installed FF won't find your certificate. You can verify that this is the problem by turning on 'Ask Every' (preferences->Advanced->certificates->Ask Every Time). If no dialog pops up when you try to connect, it means FF has not found any suitable certificate for that server.

bob

John H. wrote:
I have fc4

Ok, I don't get this, I stick my ID in my CAC reader, and with activegold, and on DoD sites, it prompts me for my card PIN and it works, allowing me onto the site.

however, on https://webmail.nmci.navy.mil, only in linux, it prompts me for my PIN, then says

The page cannot be displayed
There is a problem with the page you are trying to reach and it cannot be 
displayed.

Please try the following:

    * Click the Refresh button, or try again later.
    * Open the webmail.nmci.navy.mil home page,
    and then look for links to the information you want. * If you believe
    you should be able to view this directory or page, please contact the
    Web site administrator by using the e-mail address or phone number
    listed on the webmail.nmci.navy.mil home
page.
401 Unauthorized - The server requires authorization to fulfill the request. 
Access to the Web server is denied. Contact the server administrator. (12209)
Internet Security and Acceleration Server


help?  I had it working a while back on an earlier distro.
what am i doing wrong? _______________________________________________
mozilla-crypto mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-crypto

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to