GNOME Bugzilla – Bug 741163
Does not refresh available objects after logging in, does not display useful name/label
Last modified: 2018-08-03 19:44:52 UTC
I have a smartcard with a certificate and key in it. The certificate is visible at all times: $ p11tool --list-all pkcs11:manufacturer=EnterSafe Object 0: URL: pkcs11:model=PKCS%2315;manufacturer=EnterSafe;serial=3010053715050710;token=Red%20Key%20%28User%20PIN%29;id=%fe%c5%b4%dd%0f%36%77%fc%bd%28%33%1c%68%67%4b%de%9f%7c%9c%19;object=Intel%20Remote%20Access%20Linux%20for%20dwoodhou-linux;object-type=cert Type: X.509 Certificate Label: Intel Remote Access Linux for dwoodhou-linux ID: fe:c5:b4:dd:0f:36:77:fc:bd:28:33:1c:68:67:4b:de:9f:7c:9c:19 Object 1: URL: pkcs11:model=PKCS%2315;manufacturer=EnterSafe;serial=3010053715050710;token=Red%20Key%20%28User%20PIN%29;id=%fe%c5%b4%dd%0f%36%77%fc%bd%28%33%1c%68%67%4b%de%9f%7c%9c%19;object=Intel%20Remote%20Access%20Linux%20for%20dwoodhou-linux;object-type=public Type: Public key Label: Intel Remote Access Linux for dwoodhou-linux Flags: CKA_SENSITIVE; ID: fe:c5:b4:dd:0f:36:77:fc:bd:28:33:1c:68:67:4b:de:9f:7c:9c:19 When I select this token in Seahorse, I have one entry in the list: (null) Personal certificate Issued by: Intel Intranet Basic Issuing CA 1A It's OK that it just says 'Personal certificate', since that's all it can see. It's less OK that it calls it '(null)'. Now I right-click and log into the token. The key is now visible. Adding --login to the above p11tool command line would yield this additional output: Object 0: URL: pkcs11:model=PKCS%2315;manufacturer=EnterSafe;serial=3010053715050710;token=Red%20Key%20%28User%20PIN%29;id=%fe%c5%b4%dd%0f%36%77%fc%bd%28%33%1c%68%67%4b%de%9f%7c%9c%19;object=Intel%20Remote%20Access%20Linux%20for%20dwoodhou-linux;object-type=private Type: Private key Label: Intel Remote Access Linux for dwoodhou-linux Flags: CKA_WRAP/UNWRAP; CKA_PRIVATE; CKA_SENSITIVE; ID: fe:c5:b4:dd:0f:36:77:fc:bd:28:33:1c:68:67:4b:de:9f:7c:9c:19 But in seahorse after logging in successfully, the padlock icon becomes unlocked but the token isn't rescanned and the object is still displayed as only 'Personal certificate' rather than 'Personal certificate and key'. And still with the name '(null)'.
Created attachment 302924 [details] screenshot This still isn't working correctly in 3.15.92.
-- GitLab Migration Automatic Message -- This bug has been migrated to GNOME's GitLab instance and has been closed from further activity. You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.gnome.org/GNOME/seahorse/issues/117.