90639 - Mozilla doesn't accept certificates which became valid at that exact minute

Status: VERIFIED FIXED

(Core Graveyard :: Security: UI, defect, P1)

Description

[Ilya Konstantinov]

To reproduce:
1. Generate a certificate and create an SSL-protected site (in my case, it was
IMAP/SSL).
2. Access the site in the appropriate way (https URL for web sites, mail setting
for protected mail servers etc.) immediately.

Expected result: Since the certificate was marked as valid from the current
minute, it cannot be not-yet-valid.

Actual result: The certificate is not yet valid.

The attached screenshot demonstrates it very well. Watch the dates and times
closely.

Comment 1

[Ilya Konstantinov]

Attachment: Screenshot

Comment 2

[Bob Lord]

2.0 -> 2.1

Comment 3

[Stephane Saux]

See NSS bug 72753 there is a patch ready. Keeping this PSM bug as a tracking
bug.

Comment 4

[Stephane Saux]

ddrinan

Comment 5

[Stephane Saux]

adding nsenterprise to all P1, P2 PSM bugs with target milestone of 2.1

Comment 6

[John Unruh]

Mass assigning QA to ckritzer.

Comment 7

[David P. Drinan]

Marking fixed since I checked the patch for 73753 into the NSS_3_2_BRANCH and 
moved the NSS_CLIENT_TAG.

Comment 8

[Stephane Saux]

keywords->verifyme

Comment 9

[John Unruh]

Verified on 8/2 WinNT trunk.