519966 - importing thawte certificates with spc fails - show unfinished private-key/certificate generations

Status: UNCONFIRMED

(Firefox :: Security, defect)

Description

[Ralf Hauser]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)

Today, I got a new Thawte freemail cert.
Their web-site was successful in triggering firefox to create a private/public key pair and generate a CSR.
Once they had the cert issued, I did "fetch" and got a .spc file.

While firefox has no clue, the Vista cermgr did know that a certificate was in there

Reproducible: Always

Actual Results:  
nothing visible under "your certificates"

Expected Results:  
1) indicate that there is a private key without corresponding certificate in the "Your certificates"
2) allow to export the CSR generated
3) be able to process the .spc format.
4) allow to delete private keys/CSRs if the certificates are lost/will never arrive

somebody suggests to start firefox in XP-compatibility mode - no clue whether that really works... http://www.computergott.de/2007/11/24/thawte-zertifikat-im-firefox-unter-windows-vista/

I finally got it solved by having the windows manager export the cert from the .spc as .crt i.e. in asci armoured .pem format.

Then I imported it into the other "people" tab and *bing*, it didn't appear there, but in "Your certificates", then I could backup the key in .p12