185167 - Display of BMPString (UTF-8) encoded fields of certificate is bad

Status: RESOLVED FIXED

(Core Graveyard :: Security: UI, defect)

Description

[Tom Mraz]

When you try to display Details of certificate which has some fields with
non-ascii characters (encoded as BMPString). The display is wrong as it was
encoded with iso8859-1 encoding.

See attached screenshot.

Comment 1

[Tom Mraz]

Attachment: Screenshot of the bad display.

Comment 2

[Tom Mraz]

Attachment: The problematic certificate

Comment 3

[John G. Myers]

Attachment: Proposed fix

Comment 4

[John G. Myers]

Taking.

Comment 5

[Stephane Saux]

Comment on attachment 138792 [details] [diff] [review]
Proposed fix

I'm probably not the best person to give reviews on PSM. Kai Engert would be
the best person.

Comment 6

[(not reading, please use [e-mail] instead)]

Comment on attachment 138792 [details] [diff] [review]
Proposed fix

sr=sspitzer, but can we also get kai to review?

Comment 7

[Kai Engert (:KaiE:)]

Comment on attachment 138792 [details] [diff] [review]
Proposed fix

r=kaie

Comment 8

[John G. Myers]

Fix checked in.

Comment 9

[Jean-Marc Desperrier]

When I try to verify this bug, I still find one problem left, John.

After import of the certificate, everything's correct except for the copy of the
name of the certificate inside the title bar of the "Certificate Viewer"
windows, which incorrectly reads "Certificate Viewer:LudÄ_k RaÄiek" instead of
the proper czech characters.

As the original content of the cert CN is BMP, it has somewhere been correctly
converted to utf-8, but that string is later somewhere wrongly interpreted as
ISO-8859-1 before display.

Shall we reopen, or treat this in a separate bug ?

Just like bug 197009, it would be good to get this inside NSS 3.9.1, and then in
1.7.b.

I think this is even more important than bug 197009, because it seems to concern
all certs that have utf-8/BMP content, and by application of RFC3280, CA are
required to switch to the use of UTF-8 for certificates issued after 31/12/2003,
 and this is respected by some people.

Comment 10

[John G. Myers]

I would treat as a separate bug.

Comment 11

[Massimiliano Pala]

I tried to import the bug into FireFox 0.8 and the problem is still present.

Comment 12

[John G. Myers]

the certificate titlebar viewing issue is bug 234856