Ubuntu
opensc package

Installing Mozilla-opensc package not enough to use smart cards

Bug #72584 reported by Jussi Pakkanen on 2006-11-20

This bug report is a duplicate of: Bug #1647285: SSL trust not system-wide. Edit Remove

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	opensc (Ubuntu)	Triaged	Low	Unassigned

Bug Description

Installing Mozilla-opensc package does not make Firefox use smart cards. You have to manually instruct Firefox to use smartcards. The steps required are documented here: http://www.opensc-project.org/opensc/wiki/MozillaSteps

Installing the package should autoconfigure Firefox (and other browsers in the system?) to use smartcards.

Revision history for this message

Lionel Le Folgoc (mrpouit) wrote on 2007-09-06:

Thank you for taking the time to report this bug and helping to make Ubuntu better. You reported this bug a while ago and there hasn't been any activity in it recently. We were wondering is this still an issue for you? Thanks in advance.

Changed in opensc:
status:	New → Incomplete

Revision history for this message

Jussi Pakkanen (jpakkane) wrote on 2007-09-08:

The status is still the same as it was when I reported this bug.

Lionel Le Folgoc (mrpouit) on 2007-09-08

Changed in opensc:
importance:	Undecided → Low
status:	Incomplete → Triaged

Revision history for this message

Andreas Jellinghaus (tolonuga) wrote on 2010-02-10:

If installing the package would reconfigure firefox, people would face problems.

For example usualy you can run firefox and thunderbird at the same time.
But when you configure smart cards access to these applications, you can't
(unless you disable some security checks - which is insecure).

Thus reconfiguring firefox might be not such a good idea.

Revision history for this message

David Ward (dpward) wrote on 2018-05-27:

Firefox and Thunderbird each use a local NSS database, which is part of the profile in the user's home directory. It is created when the application is launched by the user for the first time.

For these applications to automatically load the OpenSC PKCS#11 module, there would need to be a system-wide NSS security module database, in which the OpenSC PKCS#11 module could be installed. This has been done in Fedora but not Ubuntu; see bug #1647285.