Greetings,

I have to add a “me too” to those folks who have installed the CAC-NG tokend and find that while the keychain shows their certs, and they can set up identity preferences to use those certs, when trying to use Safari to get to a site, you get an error message requesting that you select a certificate.  No matter what certificate is selected, you just get the selection again.  Reading the text of the selection box, you find that it says the site has rejected the certificate and is therefore requesting another.
So, here are the additional things that I have done which I have not seen in any of the previous posts about this issue.

I have only 3 people who have the CAC-NG card at this time.  One of those has a new machine which is running 10.6.  I installed the CAC-NG tokend and her system functions (mostly) beautifully.  The 10.5.8 system exhibits the behavior above.  I took the CAC card from the person on the 10.5.8 system to the 10.6 system and used it there successfully, indicating that the problem is not that there is something wrong with her certificates.  Both cards work in the 10.6 system.  Neither card works in the 10.5.8 system.

Finally, I set the debugger as Shawn outlined in a previous post.  These are the results.  The timestamp indicates that these results are logged at the moment in which Safari is attempting to log into a CAC-enabled website (https://webmail.west.nmci.navy.mil in this case).  For privacy reasons, I’ve replaced the actual certificate name with <CAC_Certificate>.  This string of errors shows up in the system.log every time I try to log into a CAC-enabled site.

Jul 14 15:43:36 mac /Applications/Safari.app/Contents/MacOS/Safari[75221]: preferred identity: "<CAC_Certificate>" found for "https://webmail.west.nmci.navy.mil/exchange"
Jul 14 15:43:36 mac /Applications/Safari.app/Contents/MacOS/Safari[75221]: lookup complete; will use: "<CAC_Certificate>" for "https://webmail.west.nmci.navy.mil/exchange"
Jul 14 15:43:37 mac securityd[22]: securityd(22,0xb0081000) malloc: *** error for object 0x121f000: pointer being freed was not allocated\n*** set a breakpoint in malloc_error_break to debug
Jul 14 15:43:37 mac com.apple.SecurityServer[22]: securityd(22,0xb0081000) malloc: *** error for object 0x121f000: pointer being freed was not allocated
Jul 14 15:43:37 mac com.apple.SecurityServer[22]: *** set a breakpoint in malloc_error_break to debug


-- John Daly
Apple Certified Technical Coordinator
Sysadmin 474300D