472308 - Certificate in authorities cache not been updated ( automatically )

Status: RESOLVED WONTFIX

(Core :: Security: PSM, defect)

Description

[Sandro Valentini]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.5) Gecko/2008120122 Firefox/3.0.5
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.5) Gecko/2008120122 Firefox/3.0.5

The FF isn't automatically updating certificates at cache authorities.

We need to enter in tools -> certificate manager -> authorities , and then delete the expired certificate by hand. 

This is quite a hard task to a simple user.



Reproducible: Always

Steps to Reproduce:
1. Have a certificate expired in authorities cache of FF.
2. Try to enter in a site that uses that certificate ( by sure, up to date )
3. You will receive a error that the certificate is expired, but is not. The expired is the certificate in cache authorities of FF.
Actual Results:  
1. Have a certificate expired in authorities cache of FF.
2. Try to enter in a site that uses that certificate ( by sure, up to date )
3. You will receive a error that the certificate is expired, but is not. The expired is the certificate in cache authorities of FF.

Comment 1

[Sandro Valentini]

Attachment: Evidence

Comment 2

[Johnathan Nightingale [:johnath]]

-> PSM - dunno if it's valid or not, but the cert caching (I thought it was just intermediates?) is managed below the Firefox layer

Comment 3

[Kai Engert (:KaiE:)]

Mass change owner of unconfirmed "Core:Security UI/PSM/SMime" bugs to nobody.
Search for kaie-20100607-unconfirmed-nobody

Comment 4

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

Firefox doesn't automatically update expired root certificates.