| View previous topic :: View next topic |
| Author |
Message |
wjholden
l33t
Joined: 01 Mar 2004
Posts: 818
Location: Honolulu, HI
|
 Posted: Sat Apr 28, 2012 10:11 am Post subject: [Mini Howto] US DoD CAC |
 |
|
Just sharing a few minor lessons learned getting a US DoD CAC to work with Gentoo/amd64/Firefox: | Code: | | emerge pcsc-lite ccid |
You'll need to add rc_hotplug="pcscd" to /etc/rc.conf, then | Code: | /etc/init.d/pcscd start
rc-update add pcscd default |
Add app-crypt/coolkey to /etc/portage/package.unmask since it's ~amd64 masked at time of writing. | Code: | emerge --autounmask-write coolkey
etc-update
emerge coolkey |
Open Firefox and create a security device under Edit > Preferences > Advanced > Encryption > Security Devices. Click "Load" and give it any name and specify /usr/lib/pkcs11/libcoolkeypk11.so as the module path.
You should be able to log into your CAC. If you get a weird "Status: Not Loaded" error you should restart your computer (I presume hotplug isn't correctly loaded).
I recommend you install DISA's Firefox Add-on. This will spare you the ordeal of .mil SSL certificates not validating. DISA's tool is not perfect but it helps.
Stay safe. |
|
| Back to top |
|
 |
wswartzendruber
Veteran
Joined: 23 Mar 2004
Posts: 1197
Location: Jefferson, USA
|
| Posted: Sat Apr 28, 2012 3:16 pm Post subject: |
|
|
| Hey I still have my USMC CAC. Any chance I can put my own certificates on it? |
|
| Back to top |
|
|
wjholden
l33t
Joined: 01 Mar 2004
Posts: 818
Location: Honolulu, HI
|
| Posted: Mon Apr 30, 2012 8:26 am Post subject: |
|
|
| wswartzendruber wrote: | | Hey I still have my USMC CAC. Any chance I can put my own certificates on it? |
Lol I wish, once a card is issued it ordinarily cannot be rewritten with new certificates. |
|
| Back to top |
|
|
wswartzendruber
Veteran
Joined: 23 Mar 2004
Posts: 1197
Location: Jefferson, USA
|
| Posted: Mon Apr 30, 2012 2:03 pm Post subject: |
|
|
| Rats! Well that explains why the certs expire when the card expires. |
|
| Back to top |
|
|
bklive
n00b
Joined: 31 Dec 2011
Posts: 3
Location: Georgia
|
| Posted: Tue May 08, 2012 11:09 pm Post subject: |
|
|
| What about Chromium? The settings dialogues are unclear as to adding a security device |
|
| Back to top |
|
|
|
Unsupported Software
