209837 - OCSP signers drop down list in preferences is unusable

Status: RESOLVED INVALID

(Core Graveyard :: Security: UI, defect, P2)

Description

[Andy Fyfe]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.4) Gecko/20030612
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.4) Gecko/20030612

All the entries in the popup menu for the Response Signer start with "Builtin
Object Token: ".  Prior to any one of them being selected, the popup menu is
relatively narrow, and thus all the entries appear as "Builtin Object Tok...". 
Once one is selected, the popup menu widens, and more of the text is visible,
and the entries can be distinguished.

Reproducible: Always

Steps to Reproduce:
1. create new profile
2. select the validation preference in the privacy & security section
3. click the 3rd OSCP radio button & click on the popup for the response signer

Actual Results:  
All entries in the popup were "Builtin Object Tok...".  Once a selection is
made, the popup widens, and entries begin "Builtin Object Token: Versign Class 1
Public Primar...".

Expected Results:  
Drop the prefix "Builtin Object Token:"  Possibly also provide a better default
width for the popup.

Comment 1

[Mitchell Stoltz (not reading bugmail)]

Certificate issues go to the PSM product.

Comment 2

[John G. Myers]

Confirming.

Comment 3

[John G. Myers]

Mass reassign ssaux bugs to nobody

Comment 4

[Nelson Bolyard (seldom reads bugmail)]

This 3-year old problem is not platform specific.
Or perhaps I should say, not specific to MacOS platform.
It is also apparent on Windows XP.  

I will attach some screen captures that illustrate just how bad this is.
Marking this bug P2 in hopes that will put it on the radar.  

Comment 5

[Nelson Bolyard (seldom reads bugmail)]

Attachment: screen capture showing useless list of responder certs

Comment 6

[Nelson Bolyard (seldom reads bugmail)]

Attachment: screen shot of slightly improved list after selecting one member

After selecting one member of the list, the closing the list and reopening it,
the list will widen until its width reaches the right edge of the dialog.
This is somewhat more usable, but the results are still unsorted, as shown here.

Comment 7

[Nelson Bolyard (seldom reads bugmail)]

In bug 338986 comment 11 the author claims that the only certs available 
for selection in this drop down list are CA certs, certs that show up in
the cert manager's list of cert authorities.  

I cannot confirm that, but if true, that is another significant problem 
with this UI.  The UI MUST allow the user to select "designated reponder"
certs, certs for designated OCSP responders, which are not CAs themselves,
but have certs issued by the CA on whose behalf they are acting as responders.

I'm raising the severity of this bug to major, in light of all the issues 
reported with configuring OCSP.

Comment 8

[Bob Lord]

The UI looks much better to me on the latest Firefox and Thunderbird builds on Linux.  

Nelson/Julien, are you using the latest Firefox and Thunderbird builds?

Comment 9

[Nelson Bolyard (seldom reads bugmail)]

My images are from last night's build of SeaMonkey.  

Comment 10

[Nelson Bolyard (seldom reads bugmail)]

Attachment: latest Bon Echo (FF 2.0) screen shot

I noticed three differences between Seamonkey and "Bon Echo" (BE) in the 
area of preferences for OCSP responders:

a) the cert name text box is always maximum width in BE.
b) the cert name text box is never empty in BE.
c) you cannot change the cert name in BE.

If you change the cert name in BE, and then click OK, and then go back 
again, the change is lost.  The name has reverted to previous value.

I noticed one unfortunate similarity beween BE and SM: 
The list of cert names in the drop down box is not sorted.

Comment 11

[Julien Pierre]

Bob,

I don't use either Firefox or Thunderbird due to the lack of security database sharing. I use the Mozilla build shipped with Solaris 10, which is based off 1.7.x and last refreshed through update manager on 20060120 . Unless there is evidence of an NSS bug, I'm afraid I don't have time to dig into the PSM UI issues.

Comment 12

[Kai Engert (:KaiE:)]

reassign bug owner.
mass-update-kaie-20120918

Comment 13

[Dana Keeler (she/her) (use needinfo) [:keeler]]

This functionality doesn't exist any more.