為了改善您的使用體驗，本網站正在進行維護，部分功能暫時無法使用。若本站的文件無法解決您的問題，想要向社群發問的話，請到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 發問，我們的社群成員將很快會回覆您的疑問。

Avatar for Username

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊，或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

此討論串已被封存。 如果您有需要幫助，請新增一個新問題

Certificate Based Authentication and SmartCard requirements

  • 1 回覆
  • 1 有這個問題
  • 1 次檢視
  • 最近回覆由 ygini

ygini
ygini
more options

Hello,

We are using Firefox on macOS to access web services that require Certificate Based Authentication. Our certificates are stored on YubiKeys PIV slots.

If we plug the token, open Firefox and access the website, it works just fine. The Certificate picker is shown and the OS ask for the PIV PIN to validate the access.

However, if we do the request when the token isn't plugged, Firefox does not ask for it, the website deny the authentication and the context is kept in cache. Requesting again the web site with the token added in between does not restart the certificate lookup and we are forced to close Firefox or move to a private window to make it works.

What is the proper way to avoid this issue? Is it a known bug? Is there a way to configure Firefox to always show the certificate picker even if no certificate are found and then reload the list of certificate based on connections events?

Thanks

Hello, We are using Firefox on macOS to access web services that require Certificate Based Authentication. Our certificates are stored on YubiKeys PIV slots. If we plug the token, open Firefox and access the website, it works just fine. The Certificate picker is shown and the OS ask for the PIV PIN to validate the access. However, if we do the request when the token isn't plugged, Firefox does not ask for it, the website deny the authentication and the context is kept in cache. Requesting again the web site with the token added in between does not restart the certificate lookup and we are forced to close Firefox or move to a private window to make it works. What is the proper way to avoid this issue? Is it a known bug? Is there a way to configure Firefox to always show the certificate picker even if no certificate are found and then reload the list of certificate based on connections events? Thanks

所有回覆 (1)

ygini
ygini 提出問題者
more options

Hello

Thanks for your answer but we are running 91.5.1esr and this feature isn't linked to the issue we describe.

This feature is a long waited support that allow Firefox to works with native OS certificate store. Which mean the certificate picker that I talk in my post is finally able to see certificate distributed by enterprise policies. Which is great.

But the issue I describe isn't here.

The issue I describe is that Firefox doesn't show this certificate picker if it cannot find any suitable option.

Which does not let the opportunity for the user to connect a SmartCard.