similar to: Firefox fails to authenticate .mil sites with New DoD CAC

On Thu, 2014-12-04 at 08:08 -0500, mark wrote: > On 12/03/14 17:34, Cal Webster wrote: > > Can anyone help with getting the new DoD CACs (Smart Card) to work in > > CentOS 6.6? I don't use it for console logins, only for email and .mil > > web sites. > > > > I recently had to get a new DoD CAC (Smart Card) when one of the > > buildings I work in upgraded

I thought DoD used RHEL and not Centos, or did Centos did approved DADEMS recently? On Wed, Dec 3, 2014 at 5:34 PM, Cal Webster <cwebster at ec.rr.com> wrote: > Can anyone help with getting the new DoD CACs (Smart Card) to work in > CentOS 6.6? I don't use it for console logins, only for email and .mil > web sites. > > I recently had to get a new DoD CAC (Smart Card) when

> -----Original Message----- > From: centos-bounces at centos.org > [mailto:centos-bounces at centos.org] On Behalf Of Cal Webster > Sent: Wednesday, December 03, 2014 17:35 > To: CentOS List > Subject: [CentOS] Firefox fails to authenticate .mil sites > with New DoD CAC > > Can anyone help with getting the new DoD CACs (Smart Card) to work in > CentOS 6.6? I

Can anyone help with getting the new DoD CACs (Smart Card) to work in CentOS 6.6? I don't use it for console logins, only for email and .mil web sites. I recently had to get a new DoD CAC (Smart Card) when one of the buildings I work in upgraded their security system. My old CAC was working fine prior to this for signing and encrypting email and for authenticating to various DoD (.mil) sites

Hi Tony, Have you solved this problem yet?I took another approach and used CACkey which supportsUS Government PIV cards including the CAC.? In my case I set it up on Linux Mint but there is an rpm version of CACKey for 32 or 64 bit Centos.Here is the process I went through. - setup CAC card by following instructions on: https://help.ubuntu.com/community/CommonAccessCard sudo apt-get install

So, it *seems* to be working, pretty much. I needed to install opensc, openct pcsc-lite, pcsc-lite-openct, and ctapi-common will be installed as a dependency. I *removed* coolkey and esc, which depended on it. 100% of the time, they misidentifed the new/current US federal ID PIV-II cards as coolkey cards, and popped up this "phone home" window, then a "manage smartcards"

Tue Jul 26 21:17:40 UTC 2016, m.roth at 5-cent.us wrote: > I could try the reinstall, but it's very odd - everything worked, and now, > after the upgrade, it doesn't. Oh, and here's another twist on this: Under > 6.7, if I'd logged into my webmail via firefox, and while that was > happening, I stuck my AA ("Logical token" card) into the keyboard slot, >

What's happening: I put my "SmartCard" in the reader, and the Coolkey phone home window pops up. I close it, and the SmartCard manager window pops up, saying it's not initialized. Neither of these should be happening with these cards (US federal gov't issue, not DoD). Googling, I find <https://rhn.redhat.com/errata/RHBA-2010-0068.html>, and in that, it says (in part):

Gotcha, I also work with DoD for Navy systems and was surprised by that. So you mean if we don't want to pay RHEL licensing fees, we can use Centos? Since we are paying about $100 per RHEL license. On Thu, Dec 4, 2014 at 11:36 AM, Jason Pyeron <jpyeron at pdinc.us> wrote: >> -----Original Message----- >> From: Jason Ricles >> Sent: Thursday, December 04, 2014 11:23

That is true, which we are using ours for critical things. Guess RHEL will be the way to go till Centos is maybe approved for critical systems as well. On Thu, Dec 4, 2014 at 12:29 PM, Cal Webster <cwebster at ec.rr.com> wrote: > On Thu, 2014-12-04 at 11:41 -0500, Jason Ricles wrote: >> Gotcha, I also work with DoD for Navy systems and was surprised by >> that. So you mean if

> -----Original Message----- > From: Jason Ricles > Sent: Thursday, December 04, 2014 11:42 > > Gotcha, I also work with DoD for Navy systems and was surprised by > that. So you mean if we don't want to pay RHEL licensing fees, we can > use Centos? Since we are paying about $100 per RHEL license. But you will still need a (self?) support plan to be STIG compliant. >

On Thu, 2014-12-04 at 13:09 -0500, Jason Ricles wrote: > That is true, which we are using ours for critical things. Guess RHEL > will be the way to go till Centos is maybe approved for critical > systems as well. That's really up to the program manager in which the machine would be used. He would make a determination whether it's supportable and maintainable, based on in-house

> -----Original Message----- > From: m.roth at 5-cent.us [mailto:m.roth at 5-cent.us] > Sent: Friday, July 22, 2016 4:15 PM > To: CentOS mailing list > Subject: Re: [CentOS] CentOS 6.7->6.8, ssh-add issue, followup, more info > > m.roth at 5-cent.us wrote: > > Folks, > > > > I am perplexed. I updated my workstation at work Wed before I left, > >

On Thu, 2014-12-04 at 11:41 -0500, Jason Ricles wrote: > Gotcha, I also work with DoD for Navy systems and was surprised by > that. So you mean if we don't want to pay RHEL licensing fees, we can > use Centos? Since we are paying about $100 per RHEL license. I would recommend RHEL for critical systems or those that must be certified for a particular purpose, such as CA servers.

> -----Original Message----- > From: Jason Ricles > Sent: Thursday, December 04, 2014 11:23 > To: CentOS mailing list > Subject: Re: [CentOS] Firefox fails to authenticate .mil > sites with New DoDCAC > > I thought DoD used RHEL and not Centos, or did Centos did approved > DADEMS recently? DADMS is a Navy system, but yes Centos is approved for use by DISA. You would

m.roth at 5-cent.us further wrote: ############## m.roth at 5-cent.us wrote: > Hi, folks, > > Up until a few weeks ago, it worked as it has been for years: firefox, > security device is libcoolkey, and pcscd. > > Today, I go to use it (I have done updates sine I last used it), and > try preferences->advanced->certificates, and it hangs. My most recent > try was

CentOS 7, In firefox -> privacy & security -> certificates -> security devices i am trying to load the pkcs11 modules, but get the error unable to load. I am following the directions at https://piv.idmanagement.gov/engineering/firefox/ I have installed opensc and openssl-pkcs11, which contains /usr/lib64/openssl/engines/pkcs11.so and am using that is the module Has anybody here

Hello, I have a CAC Channel Bank I with FXS cards. I've the system up and running, with just 1 issue. When I make an inbound call, Asterisk says "Zap/26 is ringing", however, the phone never rings. No lights are lit on the CAC during the calll. Outbound call works no problem, and the CAC lights up correctly. Any ideas what could be the problem? -- Richard Cook

On 04/28/2015 06:05 PM, Akemi Yagi wrote: > On Tue, Apr 28, 2015 at 3:10 PM, Johnny Hughes <johnny at centos.org> wrote: > >> CentOS is not approved for DOD use. In fact, CentOS is not now, nor has >> it ever been *certified* for anything. Certifications require people to >> PAY to certify a product. >> >> Specifically, EAL4 Certification, a requirement

On Tue, Apr 28, 2015 at 3:10 PM, Johnny Hughes <johnny at centos.org> wrote: > CentOS is not approved for DOD use. In fact, CentOS is not now, nor has > it ever been *certified* for anything. Certifications require people to > PAY to certify a product. > > Specifically, EAL4 Certification, a requirement for the DOD, costs up to > 2.5 million dollars .. see this link: