I have it working on firefox on two linux machines. For some reason, though, on my laptop(they both have F17), if I go to "manage certificates," THEN it prompts me for pin to access CAC certs, and then shows them. I was then able to use CAC sites, and it did prompt me for which cert to use. However, on my desktop, despite copying all .db files from FF profile, along with having the following pkcs11.txt, "manage certificates" does not prompt for pin, nor does it show the certs.
cat nssdb/pkcs11.txt library=/usr/lib64/libcackey_g.so name=cackey .... Obviously the end goal is to be able to use google chrome as easily as with FF in order to access CAC card, without having to go into settings or anything. I have not been able to get much help from chrome support forums, google, etc. --- Hello Howdy. Im not sure if this is the right place, but ill reply until someone say its not. Before continuing, ill ask you to test Firefox first (where the pkcs#11 libraries can be added from gui). After adding the module, click on "security devices" to check if the card has been detected and in "view certificates", to check if the certificate inside the card is visible. If that works, it should work in recent versions of Chrome. Apart from the smartcard working on the browser, some sites can be enabled to acces through specific software (or even using an specific CSP, as in windows). Can you provide the site you are testing? Chrome lets you choose the certificate to access, like other browsers To append in chrome i remember i used modutil, part of nsstools, but providing a different command: #apt-get install libnss3-tools $modutil -dbdir <firefoxprofile> -add "your module" -libfile/usr/lib64/libcackey_g.so aditoinally you can add [-mechanisms FRIENDLY]
_______________________________________________ Muscle mailing list [email protected] http://lists.drizzle.com/mailman/listinfo/muscle
