[webkit-gtk] Follow-up on Support for PKCS11/Smartcard

Sindlinger, Randall A. (GSFC-619.0)[SCIENCE SYSTEMS AND APPLICATIONS INC] randall.a.sindlinger at nasa.gov
Sun Jul 21 11:48:21 PDT 2019


I have the same problem as described in the 8-month-old thread "Support for PKCS11/Smartcard?" at https://narkive.com/KZcVk4dU

I am also trying to use the Evolution mail client v3.28.5 (3.28.5-2.el7) on Linux (CentOS 7) with Microsoft O365 mail authenticating through OAuth2 with a PIV Smartcard.

It's not clear from the thread what resolution there is, if any, to having the webkit browser connect to the smartcard interface.

The SmartCard works correctly for Firefox, OpenSSH, OpenConnect.  Even Evolution itself can read the SmartCard, and shows its certificates under Preferences->Certificates.   The issue seems specific to the webkit browser spawned by Evolution, where upon attempting a SmartCard login, the error message appears:
 Smartcard authentication failed.
Ensure your Smartcard is inserted properly in the card reader, restart your web browser and try to log in again.
I tried the solution suggested at https://help.ubuntu.com/community/CommonAccessCard#Evolution (but using ~/.config/evolution/ instead of ~/.evolution/) but it seemed to make no difference.

export EWS_DEBUG=2
export OAUTH2_DEBUG=2
did not seem to provide any debugging information, either.

Can you provide any further guidance or suggestions?

Randall Sindlinger
LAADS web team
Terrestrial Information Systems Lab
Earth Sciences Division
Goddard Space Flight Center
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-gtk/attachments/20190721/9bfa9aba/attachment.html>

More information about the webkit-gtk mailing list