120596 - NSS3.4. Screen refresh on cert manager cause reload of certs.

Status: VERIFIED WORKSFORME

(Core Graveyard :: Security: UI, defect, P1)

Description

[Stephane Saux]

If you hide the cert manager behind another window, then uncover it, the redraw
causes a cert search to occur again, and any hardware token to be read anew.

This is a different behavior than 3.3, and results in a significant delay in the
redrawing operation.

Comment 1

[Stephane Saux]

We may be able to do something in PSM regarding this issue.  Any NSS improvement
would also be welcome. Note that this is especially severe when you have a
hardware token installed.

Raising to P1, but this doesn't not block 116334.

Comment 2

[Ian McGreer]

bug 121628 will fix this.  I will have a patch soon.

Comment 3

[Stephane Saux]

Yes, its fixed now. Let's verify when 3.4 is the default NSS in moz.

Comment 4

[John Unruh]

Reopening. Not fixed yet.

Comment 5

[John Unruh]

*** Bug 124911 has been marked as a duplicate of this bug. ***

Comment 6

[Stephane Saux]

This is only an issue when using hardware devices. However, in 3.3 I didn't have
this problem.

It's possible that we go and get the certs everytime textual data from the cert
is needed but that when there are no hardware devices, the operation is fast
enough to not be noticed.

Comment 7

[Robert Relyea]

If your token is plugged in, it should be as fast as ever with Ian's changes. In
NSS 3.4 we have to check the tokens because certs may be in the tokens. We do
have to make sure the tokens have not been removed as well. 

In any case, grabbing all the certs is an expensive operation, which should not
be happening everytime you do a refresh. Future tokens (like ldap tokens) may
take quite a while to accomplish this task.

This is exasperated by the fact that PSM calls the function to get all the certs
3 times to bring up the window, rather than just once.

Comment 8

[Stephane Saux]

bob, I can demonstrate for you.

Comment 9

[Robert Relyea]

Attachment: Only check for token presense every 10 seconds.

Many tokens are reeeaaaallly slow to check if they are present or not. Only
check every 10 seconds are so. NOTE: one some platforms the interval timer is
really slow (sigh). None seem to be as slow as querying a smart card, though.

Comment 10

[John Unruh]

nsbeta1

Comment 11

[John Unruh]

WFM with the 6/6 branch Win2000 build.

Comment 12

[John Unruh]

Verified WFM.