209827 - import of certificate/privatekey+CA-certificate from pkcs12 file fails

Status: RESOLVED FIXED

(NSS :: Build, defect)

Description

[Hans Guldager Kundsen]

User-Agent:       Mozilla/5.0 (OS/2; U; Warp 4.5; en-US; rv:1.4) Gecko/20030616
Build Identifier: Mozilla/5.0 (OS/2; U; Warp 4.5; en-US; rv:1.4) Gecko/20030616

Using Mozilla 1.4 RC2 on OS/2 :

When I try to import a certificate/privatekey+CA-certificate from a pkcs12 file,
import fails with
a dialog:

   The password entered was incorrect.

I am sure that I have entered the correct correct password (testing with '1234'
and ''/blank/no-password).

The pkcs12 keystore has been exported from Mozilla 1.3-final/OS/2 (sorry cannot
see build-id without shutting down this browser)

The pkcs12 keystore has successfully imported into OS/2 Netscape version 4.6x

The pkcs12 keystore has verified using OpenSSL.

The problem has also been observed on the OS/2 build of Mozilla 1.4 RC1.



Reproducible: Always

Steps to Reproduce:
1. Select 'Manage Certificates' Properties->Privacy and Security->Certificates
2. Press Import
3. Pick PKCS12 keystore file
4. Enter correct password for Software Security Device
5. Enter correct password for PCKS12 keystore

Actual Results:  
A Dialog shows the message
   The password entered was incorrect.

Certificate/Privatekey+CA-certificate is not imported.

Expected Results:  
Certificate/Privatekey+CA-certificate imported.

Comment 1

[Hans Guldager Kundsen]

Verified bug in Nigthly build of Mozilla 1.4 for OS/2 found in
   http://ftp.mozilla.org/pub/mozilla/nightly/latest-1.4/

Build Identifier from Help->About page

    Mozilla/5.0 (OS/2; U; Warp 4.5; en-US; rv:1.4) Gecko/20030626

Specified OS/2 as OS

Comment 2

[Mike Kaply [:mkaply]]

How did you get a keystore file?

Comment 3

[Hans Guldager Kundsen]

The Certificate was issued in Mozilla 1.3 and exported  to the keystore.

I have tried deleting the certificate and re-imported it in Moz 1.3 without
problems.

I have alse imported it into Mozilla 1.01 witout problems.

But in Moz 1.4 (rc1/rc2 and nightly 26/6) import fails. 

It seems that a wrong password-string passed on from the userinterface.

I have not had time to make a test on other platforms. Sorry.

Comment 4

[Hans Guldager Kundsen]

I just tested with Nightly Mozilla 1.5a

Build ID : Mozilla/5.0 (OS/2; U; Warp 4.5; en-US; rv:1.5a) Gecko/20030602

This also has the problem.


I got time to boot my Suse8.1 Linux disk and made a test with

Mozilla 1.4 RC 2 (to compare with the OS/2 RC2)

Here I can import without problems.

Comment 5

[Mike Kaply [:mkaply]]

On the 1.4 branch, this is an optimizer bug.

not sure about GCC.

We are working on a fix.

Comment 6

[Hans Guldager Kundsen]

Hi!

I tried with the Mozilla 1.4 (final).

Here import works.

Thanks.

Comment 7

[Mike Kaply [:mkaply]]

Attachment: Unoptimize some files

i had to unoptimize some files for this to work on VACPP.

Comment 8

[Mike Kaply [:mkaply]]

Fix checked into 1.4 branch.

We have other GCC problems with security, so I am going to mark this fixed on VACPP.

Comment 9

[Wan-Teh Chang]

Michael, does the Mozilla trunk (1.5a) need this fix?

Comment 10

[Mike Kaply [:mkaply]]

Nope. 1.5a is GCC only and this was a VACPP optimizer bug.

Julian wants to keep VACPP alive with NSS, so he might want this.

Comment 11

[Wan-Teh Chang]

I checked in the workaround on the NSS_3_8_BRANCH (3.8.2)
and the NSS tip (3.9).