Description of the issue: Recently began using an SCR3310 card reader to access .mil websites. While on .mil sites Brave randomly crashes, sometimes immediately sometimes after awhile.
How can this issue be reproduced?
Visit .mil website
Get popup to select identity certificate and second popup to enter pin
After gaining access to the site, eventually Brave will crash and the entire browser closes
Additional Information: It’s awesome that Brave supports CAC readers and certificates so that .mil sites can be visited at all, but needs to be stable.
@thelonghop can you please launch Brave and go to brave://crashes and submit (if necessary) any crash repots listed here, and share the crash report IDs with me here?
The sites can only be accessed with the card, so I can’t do strict AB testing. Often Brave will crash immediately after entering the pin during the second popup. I have been able to access websites and then remove the CAC from the reader and it doesn’t crash initially, but often will eventually.
Yea um, having worked in the government, these readers are required. I was gonna speak up but wasn’t sure if OP’s situation may be different but no, seems the same for me, we MUST use our smart cards. Think, highly classified information. So sadly this isn’t something they can just test without the card.
IF this were Windows, it should just work. But being Linux, this is normally the procedure.
Ensure you have “pcscd” (the Smart Card Daemon), PKCS#11 module (unless this changed?), and NSS (Cryptography stack from Mozilla, meant for Chromium).
As long as those are present, go ahead and try Chromium, as it should hook the same CAC stuff.
Though I will say this, if certs were missing, it shouldn’t crash like that. It almost sounds like one of the shared libraries themselves are the ones crashing, taking Brave with it, but let’s test with Chromium first just to see where this issue may be.
(Forgot to mention, unless this also changed, Linux will not actually automatically start the PKCS#11 module like Windows and Mac OS do, but I have a feeling you already covered these parts since you are not getting an error about missing certificates.)