Bug 16625 - REGRESSION: SmartCard reader not working
Summary: REGRESSION: SmartCard reader not working
Status: RESOLVED INVALID
Alias: None
Product: WebKit
Classification: Unclassified
Component: New Bugs (show other bugs)
Version: 528+ (Nightly build)
Hardware: Mac (Intel) OS X 10.5
: P1 Major
Assignee: Nobody
URL:
Keywords: InRadar, Regression
Depends on:
Blocks:
 
Reported: 2007-12-27 12:23 PST by Ain Tohvri
Modified: 2008-11-17 11:31 PST (History)
1 user (show)

See Also:


Attachments
Safari wants to sign using key ... in your keychain (31.07 KB, image/png)
2007-12-27 12:24 PST, Ain Tohvri
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Ain Tohvri 2007-12-27 12:23:34 PST
After upgrading to Leopard, SmartCard reader stops working. It should ask for PIN1 instead of the key (see attached image). It worked with Tiger.

Model of a SmartCard reader:  SCM Microsystems SCR3310.

NB! Works with Firefox 3 Beta 2.
Comment 1 Ain Tohvri 2007-12-27 12:24:59 PST
Created attachment 18132 [details]
Safari wants to sign using key ... in your keychain
Comment 2 David Kilzer (:ddkilzer) 2007-12-27 15:37:28 PST
How does a web browser interface with a smartcard reader?  Is there software that's installed with the reader?  This is probably either a third-party issue or a non-WebKit issue.
Comment 3 Ain Tohvri 2007-12-27 16:04:36 PST
Browser should prompt user for the PIN1 code as used for authentication, e.g. https://www.seb.ee/cgi-bin/unet3.sh/un3.w?sesskey=&act=LOGIN&lang=ENG

It worked smoothly in Tiger and due to the fact that it works properly in Firefox it makes sense that the issue relies in WebKit.

It might of course be some core issue of PC/SC in Leopard that triggers this but even so you guys probably have access to debugging it or at least raising a subject.
Comment 4 Mark Rowe (bdash) 2007-12-27 16:19:08 PST
<rdar://problem/5664161>
Comment 5 Darin Adler 2008-01-02 10:35:17 PST
If this works in Tiger but not Leopard, it's probably *not* a WebKit issue since the latest Tiger and Leopard have the same version of WebKit. I'd guess it's a lower level issue, probably in CFNetwork, which is much changed from Tiger to Leopard.
Comment 6 Ain Tohvri 2008-01-02 10:44:28 PST
Yet the latest Firefox 3 Beta 2 works smoothly. Does Gecko have the stack bundled in opposite to the WebKit's SmartCard support that relies on Mac OS?
Comment 7 David Kilzer (:ddkilzer) 2008-01-02 11:15:55 PST
(In reply to comment #6)
> Yet the latest Firefox 3 Beta 2 works smoothly. Does Gecko have the stack
> bundled in opposite to the WebKit's SmartCard support that relies on Mac OS?

Firefox and Safari use different HTTP/network stack implementations.  I'm not sure what you mean by WebKit's "SmartCard support"--I don't think any such thing exists.

Comment 8 David Kilzer (:ddkilzer) 2008-01-02 11:16:32 PST
Regressions are P1.

Comment 9 Ain Tohvri 2008-01-15 19:47:39 PST
Works now in the latest nightly!
Comment 10 Ain Tohvri 2008-01-16 04:56:52 PST
Broken again in the latest nightly.
Comment 11 Alexey Proskuryakov 2008-01-16 10:34:08 PST
That's weird!

Could you please provide revision numbers for these two nightlies?
Comment 12 David Kilzer (:ddkilzer) 2008-01-19 03:12:41 PST
Ain, please use the WebKitTools/Scripts/bisect-builds script to narrow down the revisions that work and don't work.

If you don't have the WebKit source checked out, you may download a copy of the script from this page (use the links below "Download in other formats" at the bottom of the page to save the script as a file):

http://trac.webkit.org/projects/webkit/browser/trunk/WebKitTools/Scripts/bisect-builds

Comment 13 Stephen Bradley 2008-02-07 07:42:14 PST
I don't know if this is related to the original bug, but there is a known issue with smartcards under Leopard, not related to Webkit.
I manage several Macs with SCR readers attached and cards that used to work under Tiger do not now work under Leopard. The cards do not appear in the system Keychain at all, which they should.

The cards MOST affected are the Obethur One cards (current interim DoD issue cards) in conjunction with the SCR readers, although other cards have been affected. 
Switching to the OMNIKEY 3021 reader solved this problem on my single test case, I'm in the process of ordering more.

Check your keychain, if the card doesn't show up there then you'll know it's not a Webkit issue.
Comment 14 Ain Tohvri 2008-02-11 04:21:52 PST
(In reply to comment #12)
> Ain, please use the WebKitTools/Scripts/bisect-builds script to narrow down the
> revisions that work and don't work.
> 
> If you don't have the WebKit source checked out, you may download a copy of the
> script from this page (use the links below "Download in other formats" at the
> bottom of the page to save the script as a file):
> 
> http://trac.webkit.org/projects/webkit/browser/trunk/WebKitTools/Scripts/bisect-builds
> 

The issue is very controversial. I upgrade my WebKit nightly on a regular basis almost always daily. And while I'm not changing anything it occasionally works and always breaks after the Mac wakes up from sleep. This was not case on Tiger and is not the case with Firefox. 
Comment 15 Ain Tohvri 2008-02-20 07:43:15 PST
I can now confirm the behaviour:

1. SmartCard works with WebKit right after a restart;
2. It stops working after coming up from a sleep.
Comment 16 Mark Rowe (bdash) 2008-11-17 11:31:23 PST
WebKit itself does not interact with smart cards.  If you are still experiencing issues I would recommend filing a bug report at <http://bugreport.apple.com>, and including detailed information about how to reproduce the problem you are seeing.  That would include any steps that must be taken to trigger the problem, information about the hardware and type of smart card you're using.

This bug will be closed as INVALID per our policy for handling of bugs that are outside of WebKit.