Firefox not remembering smart card choices
When I visit a CAC-enabled site and it prompts me to select a certificate, there's a box for "Remember this decision", which is checked. But it does not remember the decision, and I get prompted each time I visit!
This is with Firefox 45.6.0 as installed by RHEL7
Wšě wotmołwy (4)
https://support.mozilla.org/en-US/kb/how-to-fix-preferences-wont-save
Note: Some software, like Advanced SystemCare with Surfing Protection, can protect files in the Firefox profile folder against changes. If you have such software then check the settings or uninstall this software.
Thanks, but none of that helped. My Firefox is about as fresh and basic as you can get, no user.js, no third-party plugins. Everything else it remembers just fine. It's only smart card selections that aren't being saved between sessions.
Start Firefox in Safe Mode to check if one of the extensions ("3-bar" menu button or Tools -> Add-ons -> Extensions) or if hardware acceleration is causing the problem.
- Switch to the DEFAULT theme: "3-bar" menu button or Tools -> Add-ons -> Appearance
- Do NOT click the "Refresh Firefox" button on the Safe Mode start window
- https://support.mozilla.org/kb/Safe+Mode
- https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes
Try to rename the cert8.db file (cert8.db.old) and delete the cert_override.txt file in the Firefox profile folder to remove intermediate certificates and exceptions that Firefox has stored.
If that has helped to solve the problem then you can remove the renamed cert8.db.old file.
Firefox will automatically store intermediate certificates that servers send in the Certificate Manager for future use.
If this hadn't helped then try to rename the secmode.db file as well.
You can use this button to go to the current Firefox profile folder:
- Help -> Troubleshooting Information -> Profile Directory:
Windows: Show Folder; Linux: Open Directory; Mac: Show in Finder - http://kb.mozillazine.org/Profile_folder_-_Firefox
I do not have any add-ons, and am using the default appearance.
Moving the cert8.db just breaks PKI.
Other than adding certificates and libcackey.so to read my smart card, this is all out-of-the-box.