Failed to load module / security device /usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so
Categories
(Release Engineering :: Release Automation: Other, enhancement)
Tracking
(firefox76 fixed, firefox77 fixed, firefox95 affected)
People
(Reporter: mikaela, Assigned: mtabara)
References
(Blocks 1 open bug)
Details
Attachments
(1 file)
(deleted),
text/x-phabricator-request
|
RyanVM
:
approval-mozilla-beta+
|
Details |
User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0
Steps to reproduce:
Installed Firefox from Flathub beta repository.
Went to Settings -> Privacy -> Security -> Certificates -> Security devices
Attempted to load Failed to load module / security device /usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so
https://github.com/OpenSC/OpenSC/wiki/Installing-OpenSC-PKCS%2311-Module-in-Firefox,-Step-by-Step
Actual results:
Adding a security device failed
Expected results:
I was hoping the security device to be added and to be able to use a smartcard (FINEID) for electronic authentication. I understand that this may be a feature of Flatpak.
Assignee | ||
Comment 1•5 years ago
|
||
Updated•5 years ago
|
Assignee | ||
Comment 3•5 years ago
|
||
Comment on attachment 9139455 [details]
Bug 1621691 - expose pcsc socket for OpenSC support in Flatpaks. r=rail
Beta/Release Uplift Approval Request
- User impact if declined: None, it addressed some flatpak automation glitch
- Is this code covered by automated tests?: No
- Has the fix been verified in Nightly?: No
- Needs manual test from QE?: No
- If yes, steps to reproduce:
- List of other uplifts needed: None
- Risk to taking this patch: Low
- Why is the change risky/not risky? (and alternatives if risky): None, it addressed some flatpak automation glitch
- String changes made/needed:
Assignee | ||
Updated•5 years ago
|
Comment 4•5 years ago
|
||
bugherder |
Comment 5•5 years ago
|
||
Comment on attachment 9139455 [details]
Bug 1621691 - expose pcsc socket for OpenSC support in Flatpaks. r=rail
Flatpak fix, approved for 76.0b5.
Comment 6•5 years ago
|
||
bugherder uplift |
Updated•4 years ago
|
Comment 7•3 years ago
|
||
Hi,
Can we reopen this ticket as the solution does not resolve use of opensc from Firefox Flatpak?
Specifications:
Linux Distribution: Fedora 33 x86_64
Kernel: 5.11.21-200.fc33.x86_64
DE: KDE
Flatpak version: 1.10.2
FireFox: 88.0.1 (x86_64) from Flathub
pcsc-tools: 1.5.7
Java: openjdk 11.0.11 2021-04-20
Smart Card Reader: SCM Microsystems, Inc. SCR331-LC1 / SCR3310 SmartCard Reader
Description:
I used the following command to run Firefox flatpak:
flatpak run --socket=pcsc --device=all org.mozilla.firefox
I then attempted to add a new Security Device to Firefox using the path, /app/lib/opensc-pkcs11.so. Unfortunately I receive the following text within a dialog:
"Unable to add module"
From another discussion on the flatpak IRC channel, I understand that trying to override file access within /usr (where /usr/lib/opensc-pkcs11.so is located) is not possible right now.
Advice received from GitHub was to reopen this ticket, and request the addition of opensc to the flatpak app. The details for doing so resemble those for Thunderbird.
Would appreciate the support to resolve this issue!
I also tried this and found out the following:
• RPM-Firefox (on Fedora 35) has /usr/lib64/p11-kit-proxy.so
loaded as a security module.
• I don’t know what’s the difference between p11-kit-proxy.so
and opensc-pkcs11.so
(before I used to add the latter in Firefox, but that seems to have changed to the first).
• Firefox-Flatpak loads the runtime org.freedesktop.Platform/x86_64/<VERSION>
• These platforms provide the required module at /var/lib/flatpak/runtime/org.freedesktop.Platform/x86_64/21.08/active/files/lib/x86_64-linux-gnu/p11-kit-proxy.so
.
At this point, I wasn’t able to succeed, as I don’t know how to load such a platform library into a flatpak. When I tried to specify the path in the dialog, I get the above mentioned error. Maybe that needs to be done in the metadata
file of FF flatpak.
Can anyone provide a hint about how to add this library (and what’s the difference between p11-kit-proxy
and opensc-pkcs11
)? This sole thing blocks me from using the flatpak versions of Firefox and Evolution!
[Tracking Requested - why for this release]:
Description
•