search

yiminyangguang520 / eid-mw

Automatically exported from code.google.com/p/eid-mw
GNU Lesser General Public License v3.0
0 stars 0 forks source link

eid not working with keychain in Snow Leopard 10.6.3 #39

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. install eid-mw
2. put eid card when keychain launched
3. modify something that needs password, put PIN code when asked, keychain just 
crash, also in login window and in Safari

Original issue reported on code.google.com by pikatux...@gmail.com on 10 Jun 2010 at 9:26

GoogleCodeExporter commented 9 years ago 
also for 10.6.4

Original comment by amandine...@gmail.com on 2 Jul 2010 at 1:59

GoogleCodeExporter commented 9 years ago 
hello pikatuxgpl and amandinelegrand9,

Could you provide me with a detailed case?
As I've been playing around with the keychain, changing signature key acces and 
certificate trust setting, but cannot reproduce the keychain crash. (in 10.6.4, 
64 bit)

Original comment by frederik...@gmail.com on 12 Jul 2010 at 2:41

GoogleCodeExporter commented 9 years ago 
First, the official latest eidmw with easy installer was installed. As it 
didn't work on 10.6.3,I've installed latest rc build for easyinstaller.

During the installation, asked in french, I got the second step with message in 
Dutch. Asking me to plug the eid reader. As I do it, the program disappear 
instantly.

The eid viewer app works great, version is the latest rc downloaded. But in 
keychain, as in safari etc, when I've card inserted, the OS ask me pin instead 
of password, as I've linked my personal account with the eid certificate.

Instead of do the task, keychain enters in no return buckle and the I have to 
ask to quit it manually, tasks aren't done for sure!

Original comment by pikatux...@gmail.com on 19 Jul 2010 at 7:22

GoogleCodeExporter commented 9 years ago 
Thank you for your detailed report.
I've been able to reproduce the installation bugs and will try to fix them asap.

I'll have a look on the login issue as well

Wkr,
 Frederik

Original comment by frederik...@gmail.com on 19 Jul 2010 at 8:28

GoogleCodeExporter commented 9 years ago 
Quiting of the Quickinstaller was due to a SIGPIPE signal send by the stopping 
64-bit pcscd service (we now ignore this signal, and establish a now context 
with the (afterwards) launched 32-bit pcscd).
Updated the QT language file for the Quickinstaller, plugin cardreader message 
also in French now when asked for.

Original comment by frederik...@gmail.com on 20 Jul 2010 at 8:45

GoogleCodeExporter commented 9 years ago 
Hi, tested latest quickinstaller on 10.6.4

Indeed now installer problems (SIGPIPE signal and french language) now have 
disappear. I've also noticed that I can log in with my eid card into my user 
session, but it asked once to link "a new keychain" with user keychain, or to 
make a copy. I've asked to link the keychain of the eid with the user keychain. 
But now I've something I didn't have with older version (those who where 
correctly working on 10.6.0 to 10.6.2) : it ask in the user session the 
"classical" password of the keychain once every time I open a new session with 
my user).

Also, I still have same crash as with older version, same problem with safari 
also (certificates are found, but are always refused by servers, I've tried 
myminfin.be and tax-on-web.be websites).

Best regards,
Pikatuxgpl

Original comment by pikatux...@gmail.com on 20 Aug 2010 at 5:09

GoogleCodeExporter commented 9 years ago 
There is a known issue with Safari and the eID. We are in contact with the 
vendor about this. For now, it is recommended to use Firefox with your eID.

Kind regards,

Koen De Causmaecker

Original comment by koe...@gmail.com on 16 Sep 2010 at 11:40

GoogleCodeExporter commented 9 years ago

Original comment by fr...@apsu.be on 1 Oct 2010 at 8:53

GoogleCodeExporter commented 9 years ago 
Apple fixed the SSL library issues in OSX 10.7 (Lion). As a result, on OSX 
Lion, eID authentication in Safari using mutual SSL works.
Snow Leopard (10.6) and lower remains affected.

Original comment by koe...@gmail.com on 10 Nov 2011 at 8:49

GoogleCodeExporter commented 9 years ago 
Safari uses an OSX system library for SSL authentication. 
On Snow Leopard and lower: when initiating a mutual ("client") SSL 
authentication, only the end entity certificate is sent to the server. The 
server needs the intermediate CA ("Citizen CA/Foreigner CA") to verify the 
chain of trust to the root CA.

Original comment by koe...@gmail.com on 10 Nov 2011 at 9:02