Using a CaC reader?
I am wondering how can I use my CAC reader on since I am in the military keep getting no client certificate presented
41 Replies
what
what is this?
logining into my military things
but keep getting that error
Just to bridge the gap here. A CAC card functions as a smart card so it’s probably something with the smart card driver
I'd start with using pcsc_scan to verify the card is being detected.
First, check that pcscd is running:
systemctl status pcscdIf it's running, then run pcsc_scan (you probably need to "dnf install pcsc-tools" first) without the CAC in. Hopefully your reader(s) show up. Next, insert the card. pcsc_scan should show some output indicating it read the card.
should look something like so
Also: what browser are you using, and how did you install it.
sorry, obviously the dnf command wasn't going to work, wasn't tracking where I was talking
eh thats alright
you can install pcsc_scan in a distrobox and run it
That said, if you're using the built-in firefox from flatpak, it's not going to work
GitHub
Flatpak Apps and SmartCard or Security Device · Issue #4066 · fla...
Linux distribution and version Linux Mint 19.2 Flatpak version Flatpak 1.9.3 Other versions Thunderbird 78.6.1 pcsc-lite version 1.8.23. OpenSC 0.21.0 [gcc 7.5.0] Enabled features: locking zlib rea...
rpm-ostree install pcsc-tools I just did this
The most reliable I've had this working is to (after confirming things are working in pcsc_scan) is to layer/rpm-ostree install chromium or your other preferred chrome based browser.
layered firefox can work but I generally found it less reliable
I basically just keep a separate browser for all my CAC-enabled stuff.
it still does it
pcsc_scan?
Or the browser?
browser
Is the scan seeing your reader and card?
That’s the first thing that needs to be working
the pcsc_scan works
K. And you’re using an rpm-ostree installed chromium now?
ok gotta restart the pc now
thank you dude it works
Happy to help
I will say the restart process on bazzite is weird because I do have to do a complete power off for it to run again
its doing it again somehow
pcsc_scan is seeing both the reader and the card?
I've seen pcscd crash on occasion, too: systemctl status pcscd, and if it failed, restart it.
That works but I keep having to uninstall and reinstall chromium everytime it stops working
Like what causes that?
You really shouldn't need to reinstall chromium. At worst quit and reopen it?
Thats what I kept trying at first
No idea. It's been pretty stable on f42 for me, though. 41 was crashy.
I think the reboot is what's changing the state, not the reinstall.
Something that should be fixable without reboots, just gotta find what's going on.
I have been rebooting
So, just going through the confirmation steps again:
1) pcscd is shown as running
2) pcsc_scan detecting the readers, and once you insert the card, it's detected without errors?
Something to try if the above is good and it's still not working:
it detects it without error
Quit chromium, remove the card. Restart chromium, insert card, load the page.
If that doesn't work, remove card, quit chromium. Insert card, wait a sec for it to read the card, start chromium, load the page.
These things can just be finicky. :/
yea still doesn't work smh
I genuinely have no idea why reinstalling chromium would have any effect. It doesn't make sense to me.
I keep edge installed for my cac-enabled stuff. It's mostly microsoft hosted junk anyway :p
Built-in reader? Have a different one to try?
I have one of them plug in ones and I don't have a different one been trying to get my things set up for college
I'm a bit stumped.
yea keeps saying this
I guess I'd try purging the chromium cache by deleting ~/.cache/chromium and perhaps ~/.config/chromium, just to see, but again, that doesn't make and sense re: the reinstall.
Where would those be?
Those are the directories -- in your home directory.
Ok
sad news still doesn't work
gonna give this a try aswell as ive been looking for a way to get get my CAC working on my handheld
Ill report back if i have the same issue or not
Platform: Legion Go running a fresh install from today.
1.
rpm-ostree install pcsc-tools
Restarted
2.
pcsc_scan tested good for both reader and card
3.
rpm-ostree install chromium
Restarted
4.
Email login tested good on Chromium (Also tested on Chrome and Edge installed using Flathub, both did not detect the CAC)
5.
Restarted to test the mentioned issue, logged into email with no issue again.