[SmartcardServices-Users] tokendPKCS11 not working w/ Firefox (all versions)

[Miller, Timothy J.]

Hints appreciated.  

The browser returns sec_error_pkcs11_function_failed, which is a non-specific error.  I pulled down a nightly for the NSS debugging, and find the following PKCS11 debug (full debug avail on request):

-1334726656[28e8ea0]: C_OpenSession
-1334726656[28e8ea0]:   slotID = 0x0
-1334726656[28e8ea0]:   flags = 0x4
-1334726656[28e8ea0]:   pApplication = 0x3130e00
-1334726656[28e8ea0]:   Notify = 0x2533919
-1334726656[28e8ea0]:   phSession = 0xb071aacc
-1334726656[28e8ea0]:   *phSession = 0x2
-1334726656[28e8ea0]:   rv = CKR_OK
-1334726656[28e8ea0]: C_SignInit
-1334726656[28e8ea0]:   hSession = 0x2
-1334726656[28e8ea0]:   pMechanism = 0xb071ab1c
-1334726656[28e8ea0]:   hKey = 0x5
-1334726656[28e8ea0]:       mechanism = CKM_RSA_PKCS
-1334726656[28e8ea0]:   rv = CKR_OK
-1334726656[28e8ea0]: C_Sign
-1334726656[28e8ea0]:   hSession = 0x2
-1334726656[28e8ea0]:   pData = 0xb071abdc
-1334726656[28e8ea0]:   ulDataLen = 36
-1334726656[28e8ea0]:   pSignature = 0x188ccc00
-1334726656[28e8ea0]:   pulSignatureLen = 0xb071ab28
-1334726656[28e8ea0]:   *pulSignatureLen = 0x80
-1334726656[28e8ea0]:   rv = CKR_FUNCTION_FAILED

Since the module loads and does everything else correctly (near as I can tell) I'm not positive this is a FF bug.  However, I don't know if it's an Apple bug either, so I haven't opened one against SmartCardServices ... yet.  I know others are having the same problem, but with recent fixes in 10.6 and Safari the use of FF with smartcards has declined a bit (or alternative PKCS11 modules are being used).

Anyone else have an idea?

-- Tim