Use a DoD smartcard to access CAC enabled websites

https://help.ubuntu.com/community/CommonAccessCard

A long time ago, I remember needing to add the DOD root certs as well since they were not distributed with either FF or Debian.

A smart card reader is also a handy thing to have if you wish to use an OpenPGP card.

Unfortunately the recent increased attack on user controlled crypto has lead to significant barriers if one wishes to obtain crypto smart cards:

https://www.sigilance.com/

Sigilance.com wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

As a result of the uncertainty of the current political moment,
SIGILANCE has ceased the production and shipping of cryptographic
smart cards. This action is taken freely, voluntarily and without
duress. As of this date (31 January 2017), neither I nor my company
have been subject to any warrant, national security letter or law
enforcement request. To the best of my knowledge, no security flaw
exists in the software running on shipped cards, and they remain
safe to use; I am signing this message with mine.

The code running on all existing SIGILANCE cards remains posted on
GitHub at the following link:
https://github.com/panchromatic/sigilance-openpgp/ 

Alternate sources for OpenPGP-compatible hardware are listed below:

OpenPGP Smart Card v2.1 (contact-only, up to 4096-bit keys)
http://shop.kernelconcepts.de 

Yubikey NEO (NFC and USB interface, up to 2048-bit keys)
https://www.yubico.com/products/yubikey-hardware/yubikey-neo... 

Yubikey 4 (USB-only, up to 4096-bit keys)
https://www.yubico.com/products/yubikey-hardware/yubikey4/ 

Fidesmo Card with Privacy Features (NFC-only)
http://shop.fidesmo.com/product/fidesmo-privacy 

Joey Castillo
OpenPGP key fingerprint: 77C8 FBE4 0A6C 85C3 075B 0F90 61CA 2CC3 FE94 8CC3
https://www.joeycastillo.com/key.txt 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJYkT/oAAoJEG/2dkDf1kjxuI8H/0WsqvgQZQ9rjOiiUua62c59
VJcNUZhCezzWoFXIDvYhGlaDhwHQiG3FpoNCVz+3bGEWRtPgP6aCeCgbPcXxac4U
2FnO7VgOFX7ZQXaMhTifyInsbAeMt9iwlQNelOMSw6QEN3lcVWQGafvRK3/wKFKG
bZK2TKMVwEcHJ43HgtDJq0bgPV8Nnw+H1CbD4+yPdYOeq62324kgZdb/Kj0yIuLb
52AFDey6NCckVuCkyH/2znZGdHv85VBP7UL/uSzE1vQou3yL729pTnCWVuxnqxcM
d+EQIAOL3BefWKU7QXga9r25+ldOCrdFSbVZuibN75b7XPGSggM/Z0XMEiQ5S70=
=IvhC
-----END PGP SIGNATURE-----