Vivaldi does not prompt for certificate authentication (PIV card)

kitsushadow

I just recently switched to Vivaldi on Mac and I am not getting the certificate prompt.

The trick is if you were using the PIV card before you need to quit all browsers that may have been using the card and then reopen Vivaldi to access the domain.

modedit Split from https://forum.vivaldi.net/topic/21748/vivaldi-not-prompting-for-certificate-authentication-any-more/14
Moved to Mac forum

kitsushadow

Hey @Gwen-Dragon I ran into quite a number of different issues on that machine and reverted to Mojave. Appreciate your response although i didn't reply.

I currently have a second machine running Catalina that the PIV card is functioning much cleaner on, however, the PIV card works on Safari and Chrome only. I am prompted for my card credentials and cert on both browsers regardless of what order I open the browsers or how many browsers are using the credential, except for Vivaldi. The fact it works on chrome is a good sign. I've provided my version details below.

Vivaldi   2.11.1811.49 (Stable channel) (64-bit)
Revision  cac8cb477e6de02013662fb5f48ac1a82bca666b
OS.       macOS Version 10.15.4 (Build 19E266)

kitsushadow

@Gwen-Dragon Yes, that was me.

kitsushadow

@Gwen-Dragon VB-65076

kitsushadow

@Gwen-Dragon So on Catalina Vivaldi doesn't prompt me for the CERT I want to use to then apply my PIN. On Mojave, with a CAC enabler (I use ActivID client) my PIV is handled just fine across all browsers.

On Catalina, Safari and Chrome prompt for my cert which I then provide my PIN for and continue on.

kitsushadow

@Gwen-Dragon Thanks so much!

kitsushadow

@Gwen-Dragon All good, I'm happy test to the extent that I can. If I need to subscribe to a nightly build or something I can try that.

kitsushadow

Tried the new build but it didn't work.

kitsushadow

Thanks @Gwen-Dragon, just wondering if there were any updates. Happy Friday!

jacuwe

I'm in a similar situation as @kitsushadow. I'm only using macOS Mojave. Vivaldi doesn't prompt for PIV credentials. Chrome/FF/Safari work fine.

Vivaldi  3.0.1874.38 (Stable channel) (64-bit)
Revision ca1a7297a62038cd7ef1a841248d749a0346cc41
OS	 macOS Version 10.14.6 (Build 18G4032)

On Windows, Vivaldi prompts to select credentials, but it doesn't appear to pass those credentials to the web resource. Chrome on Windows works fine with PIV.

xevrem

similar issue. we have users who use yubikeys or CAC cards (smart cards) to provide credentials and vivaldi is not prompting for those certs, but chrome/safari/brave will.

Vivaldi	3.1.1929.45 (Stable channel) (64-bit)
Revision	1eb3263017ed42270818939fbff241845938a81f
OS	macOS Version 10.15.5 (Build 19F101)

xevrem

Hey all,

What can I do as a user to prove this is an issue so that it gets fixed?

xevrem

@Gwen-Dragon would the yubikey FIPS-C be considered a "special PIV" in this case? (i just want to be sure)

jmto

Well, if this is the same thing as like if trying to use https://dvv.fineid.fi/authentication

It does not prompt it on Vivaldi on Windows either. Chrome prompts and works nicely.

Meaning this kind of box:

Comes up with Chrome, but not with Vivaldi.

jmto

Tested Firefox, it didn't work out of the box either. Did need to follow these steps:
https://www.laakariliitto.fi/palvelut/jasentuotteet/kortinlukija/firefox-lisaasetukset/

Then it seemed to know the card reader and prompt my certificate from the card. So don't know if the installation of the the DigiSignApplication did something to Chrome's settings to make it work out of the box, or does Chrome somehow support it. https://dvv.fi/windows-versiot

If I go to Chrome, I find my certificates are visible in Certificates -> Personal in Chrome, when the Card is inserted. So Chrome knows how to load those certificates to be used. Trying to find the same in Vivaldi, searching Certificates in settings doesn't show anything.

Looking at the OS side the "Manage User Certificates" will show them. So know I understand, Firefox isn't capable for some reason using OS certificates, it needs to be told/load that provider so that it can get the certificate, but then as Chrome supports, why does not Vivaldi.

But now I did restart Vivaldi, and tried that again, got the prompt and it worked! So dunno what my problem was, but restart helped

xevrem

@jmto said in Vivaldi does not prompt for certificate authentication (PIV card):

Looking at the OS side the "Manage User Certificates" will show them. So know I understand, Firefox isn't capable for some reason using OS certificates, it needs to be told/load that provider so that it can get the certificate, but then as Chrome supports, why does not Vivaldi.

interesting, i'll have to try what you did next time i'm in vivaldi on macos for work.

that said, with firefox, there is a flag in about:config you need set. Set security.osclientcerts.autoload to true, and firefox should properly talk to the cert store and load the certs (at least that is what seemed to fix cert errors for me wrt firefox). why that isnt on by default, i have no idea...