1317981 - Fix a few places in certutil/crlutil/cmsutil that fail to use the provided password parameter

Status: RESOLVED FIXED

(NSS :: Tools, defect)

Description

[Kai Engert [:KaiE:]]

A few scenarios of certutil/crlutil/cmsutil don't pass on the password parameter, so the tools are unnecessarily stuck and prompt for a password.

Comment 1

[Kai Engert [:KaiE:]]

Attachment: 1317981-v1b.patch

Comment 2

[Kai Engert [:KaiE:]]

It would be good to get this correctness fix into 3.28

Comment 3

[Robert Relyea]

Comment on attachment 8811251 [details] [diff] [review]
1317981-v1b.patch

Review of attachment 8811251 [details] [diff] [review]:
-----------------------------------------------------------------

::: cmd/smimetools/cmsutil.c
@@ +472,5 @@
>      if (cms_verbose) {
>          fprintf(stderr,
>                  "Created CMS message, added signed data w/ signerinfo\n");
>      }
> +    signerinfo->cmsg->pwfn_arg = pwcb_arg;

I think there may be a function that sets this, but this should be fine.

::: lib/smime/cmssigdata.c
@@ +726,5 @@
>              }
>          }
> +        if (sigd->cmsg) {
> +            pwarg = sigd->cmsg->pwfn_arg;
> +        }

I think there may be a function that gets this, but again, this is fine.

Comment 4

[Kai Engert [:KaiE:]]

I couldn't find smime functions that "return.*pfwn_arg".

I could find CMS message encoding functions that change the pwfn_arg of a message, but I couldn't find anything for the signer-info struct.

Comment 5

[Kai Engert [:KaiE:]]

Landed into NSS trunk:
https://hg.mozilla.org/projects/nss/rev/8e8ded73dca1

and also into NSS 3.28 branch:
https://hg.mozilla.org/projects/nss/rev/b09fe3c22b24