Re: JSS/NSS locks my smart card after 1 bad pin entry

Robert Relyea <[email protected]>
Newsgroups gmane.comp.mozilla.crypto
Message-ID <[email protected]>
On 10/07/2016 06:56 PM, Ernie Kovak wrote:
> Hello -
>
> We're using JSS4 and NSS 3.24 with an OpenSC module to interact with a DoD CAC. CACs will lock after 3 consecutive bad PIN entries. We're finding that if the user enters a bad PIN even once, that hard limit is exceeded and the card is locked.
What version of openSC are you using. OpenSC only recently got CAC 
support added to it.

Have you tried coolkey?
>
> I've searched through NSS to see if there's PIN retry logic, but I didn't see anything, though I quickly got lost in the code so not sure. I'm a java dev...

NSS itself does not retry bad pins, but it does present the application 
the opportunity to retry the pin. It has a flag so applications that 
cache the pin can know to discard the cached pin on retry. It could be 
an error in the JSS pin handler?
>
> Is anyone else running a configuration like this that's seeing this behavior? Is there a configuration item that might limit the retries?
>
> Thanks!
> Ernie


-- 
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.