Closed Bug 1418135 Opened 2 years ago Closed 2 years ago

asynchronously determine the certificate chain to display in the details pane of the certificate viewer

Categories

(Core :: Security: PSM, defect, P1)

defect

Tracking

()

RESOLVED FIXED
mozilla59
Tracking Status
firefox59 --- fixed

People

(Reporter: keeler, Assigned: keeler)

References

(Blocks 1 open bug)

Details

(Whiteboard: [psm-assigned])

Attachments

(1 file)

The current certificate viewer uses "getChain" to determine what chain to show in the details pane. This is problematic for a number of reasons including a) it's synchronous (and potentially slow) and b) getChain may return something almost entirely quite unlike any actual trusted path.

This won't fix the whole problem (whatever's opening the certificate viewer should really be passing in the chain itself), but that's hard, so this would at least change the determination to be asynchronous and at least won't result in something completely bogus.
Comment on attachment 8929244 [details]
bug 1418135 - asynchronously determine the chain to display in the details pane of the certificate viewer

https://reviewboard.mozilla.org/r/200518/#review206038
Attachment #8929244 - Flags: review?(mgoodwin) → review+
Thanks!
Had to fix up some eslint issues, but otherwise looks good to go: https://treeherder.mozilla.org/#/jobs?repo=try&revision=f350539f454f
Pushed by dkeeler@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/64a8c43f5b9c
asynchronously determine the chain to display in the details pane of the certificate viewer r=mgoodwin
https://hg.mozilla.org/mozilla-central/rev/64a8c43f5b9c
Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla59
You need to log in before you can comment on or make changes to this bug.