Re: connection reset/no data returned errors in browser with pcsclite/coolkey

Douglas,

Thanks for your help.

It uses the card in that it prompts for pin, then prompts for which cert to
use.  On sites that use Digital signature certificate, they work fine.  On
sites, such as webmail, that use email certificate, I get those errors.

That being said, both types of certs/sites work on my f19 laptop:(

How do I see if I'm missing some such certificates?  My issue is I get the
same error with firefox, chrome, and davmail, and with any user I
create/try.

I attached the debug, but didn't see anything relevant.  Prior to this
email, I had to use virtualbox in order to send an email that I had to
send.  Pretty frustrating:O


On Thu, Oct 3, 2013 at 2:10 PM, Douglas E. Engert <[email protected]> wrote:

>
> On 10/3/2013 1:02 PM, Howdy Dood wrote:
>
> Douglas, thanks, but as I said, it works on the exact same site with
> another machine.  The site is not down.  I'm using it right now through
> virtualbox with windows 8.
>
>  It seems to only have the problem when using the email certificate, but
> not the digital signature certificate(those sites work).
>
>
> What does the pcscd debugging show?
>
> Does it even get far enough to use the card?
>
> Are you missing some CA certificates  or intermediate certificates on the
> F19?
>
> I believe  that on DoD CAC cards, the two certificates may be signed by
> different CAs
> with different trust chains.
>
>
>
> On Thu, Oct 3, 2013 at 12:16 PM, Douglas E. Engert <[email protected]>wrote:
>
>>
>> On 10/3/2013 10:51 AM, Howdy Dood wrote:
>>
>> Hello,
>>
>>  I have Fedora 19 on two machines.
>>
>>  I use libcoolkey to use a Common Access Card's certificates to access
>> my webmail at http://www.foo.bar.gov
>>
>>  However, since upgrading to F19 on machine two, although I am prompted
>> for pin, etc, and certs show, and I can choose the right cert, I get:
>> "
>>  The connection was reset
>>
>>  The connection to the server was reset while the page was loading."
>>
>>  and on a related site, I get:
>>
>>  "Unable to load the webpage because the server sent no data.
>> Error code: ERR_EMPTY_RESPONSE"
>>
>>  On machine one, it works fine.  I cannot figure out what the problem is
>> here.  Same version of pcsc, same version of libcoolkey... on machine 2,
>> both firefox and chrome have this problem.
>>
>>  Both machines are on the same network.
>>
>>  On machine two, if I open up virtualbox and go to win8, and use CaC
>> there, I can access the site with IE.
>>
>>   Any site that requires email signature certificate on card has this
>> problem.  If the site requires digital ID certificate, it still works fine.
>>
>>
>>  That sounds like the old version was caching the pin, and new version
>> is not, or not caching it correctly.
>>
>> For PIV  cards, (and all newer CAC cards are  both)  when the signature
>> key is used to do a crypto
>> operation, the previous operation to the card must have been a verify
>> i.e. PIN is sent.
>>
>> You can run pcscd in debug mode, and watch the commands to the card to
>> get some  more information.
>>
>> And as a previous responder said, it could be because the *.gov web site
>> is down...
>>
>>
>>
>>
>>  Thanks for help
>>
>>
>> _______________________________________________
>> Muscle mailing [email protected]://lists.musclecard.com/mailman/listinfo/muscle_lists.musclecard.com
>>
>>
>>  --
>>
>>  Douglas E. Engert  <[email protected]> <[email protected]>
>>  Argonne National Laboratory
>>  9700 South Cass Avenue
>>  Argonne, Illinois  60439
>>  (630) 252-5444
>>
>>
>> _______________________________________________
>> Muscle mailing list
>> [email protected]
>> http://lists.musclecard.com/mailman/listinfo/muscle_lists.musclecard.com
>>
>>
>
>
> _______________________________________________
> Muscle mailing [email protected]://lists.musclecard.com/mailman/listinfo/muscle_lists.musclecard.com
>
>
> --
>
>  Douglas E. Engert  <[email protected]> <[email protected]>
>  Argonne National Laboratory
>  9700 South Cass Avenue
>  Argonne, Illinois  60439
>  (630) 252-5444
>
>
> _______________________________________________
> Muscle mailing list
> [email protected]
> http://lists.musclecard.com/mailman/listinfo/muscle_lists.musclecard.com
>
>

_______________________________________________
Muscle mailing list
[email protected]
http://lists.musclecard.com/mailman/listinfo/muscle_lists.musclecard.com