Doug Engert

Does anyone have access to an official version of ANSI X9.62? I found a draft online from 1997. Can someone verify that the official version says: "The elliptic curve public...

If `app default` has no entries is it dropped? Does the `app pkcs15-init` section need a `framework pkcs15` section? `sc_pkcs15_bind` is where the `use_file_cache = scconf_get_str(conf_block, "use_file_caching", use_file_cache);` is set,...

Your certificate appears to be self signed. It could be that FireFox 121 has changed how it trusts a self signed certificate. Google for: firefox 121 self signed certificate OpenSC...

But 1e625a3824c6a639e4c1590fe20899ade93242d0 is adding that the key is on the token, which in past it ignored. You may still have an issue with self signed certificate. Best to tell Mozilla...

Good to see @Jakuje is looking at this too. https://www.mozilla.org/en-US/firefox/releases/ says 121.0 was released December 19, 2023, with 121.1 January 9, 2024 So it is very new. On your OS...

pkcs11-spy.c:1579 if (strcmp(pInterface->pInterfaceName, "PKCS 11") != 0) { needs to check if `pInterface != NULL` and if `pInterface->pInterfaceName != NULL`.

Here is a way to install Firefiox nightly builds without SNAP https://blog.nightly.mozilla.org/2023/10/30/introducing-mozillas-firefox-nightly-deb-packages-for-debian-based-linux-distributions/ It installed 123.a1 in my Ubuntu 22.04. Will see if I can get at least spy to work.

@Jakuje in regards to the segfault I made the following hack: ``` diff --git a/src/pkcs11/pkcs11-spy.c b/src/pkcs11/pkcs11-spy.c index 00575444e..53b2113d6 100644 --- a/src/pkcs11/pkcs11-spy.c +++ b/src/pkcs11/pkcs11-spy.c @@ -1575,7 +1575,7 @@ spy_interface_function_list(CK_INTERFACE_PTR pInterface) CK_VERSION...

@SCjona I agree with @Jakuje that using the cert/key without a pin is a good idea. Years ago I added code to card-piv.c to allow the use of the 30...

Sorry should have said "without a pin is a bad idea."