136832 - Mozilla should give a change to select the certificate when multiple ceritificate in the same profile

Status: VERIFIED DUPLICATE of bug 91495

(Core Graveyard :: Security: UI, defect, P3)

Description

[Kevin Huang]

From Bugzilla Helper:
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
BuildID:    2002031104

I found that Mozilla do not give the user the chance to select which 
certificate to use when there are multiple certificate in the same profile. I 
use the iPlanet Certificate Server 4.2(with SP2) and issue an agent certificate 
and a non-agent certificate. When I import those two certificate in the same 
profile of Mozilla, (that is, you should see those two certificate in 
the "Manage Certificate" Dialog), and then I access the CMS server Agent SSL 
port, The Mozilla will not give me the chance to select which certificate to 
use, and so I could not connect to the CMS Agent even with a agent certificate.

Reproducible: Always
Steps to Reproduce:
1.Dowoload iPlanet Certificate Server 4.2 (with SP2) from iPlanet
2.Install CMS on computer(For me, champion.prc.sun.com)
3.The CMS agent port is: 8100, the EE port is: 443(SSL) and 8080(Non-SSL)
4.Get the certificate for agent (See CMS docs for detail)
5.Go to CMS EE Port (For me,https://champion.prc.sun.com:443) and Enrollment an 
request called agent.
6.Go to CMS Agent Port(For me, https://champion.prc.sun.com:8100) and accept 
the request, make sure accept it as a CMS agent.
7. Find out the agent certificate and backup to disk, agent.p12
8. do 5-7 again, issue a certificate name nonagent, save it to nonagent.p12 . 
Make sure in step6  DO NOT accept the request as a CMS agent.
9. Create a new profile in Mozilla Profile file Manager named test.
10. start Mozilla with test profile.
11. Restore the agent.p12 and nonagent.p12 in "Manage Certificate"
12. Restart Mozilla
13. Try to access the Agent Port(For me, https://champion.prc.sun.com:8100)
14. You will find that a unauthrized page occurs, and you have no chance to 
select to use the agent certificate and not the non-agent one.
15. Delete nonagent certificate in "Manage Certificate"
16. Restart Mozilla
17 goto Agent Port again, you will find you can access agent port this time.
18. You can do those steps in Internet Explorer 6.0, and IE give use the chance 
to select which certificate to use.



Actual Results:  Can not access agent port

Expected Results:  User should choose which certicate to use.

Comment 1

[Mitchell Stoltz (not reading bugmail)]

->PSM

Comment 2

[John Unruh]

Looks like a dupe of bug 91495. The workaround is Edit>Prefs>Privacy>Certs>Ask 
Every Time.

Comment 3

[Kai Engert [:KaiE:]]

*** This bug has been marked as a duplicate of 91495 ***

Comment 4

[John Unruh]

Verified dupe.