1446331 - P12 exported from Firefox 59 can't be imported into IE

Status: RESOLVED DUPLICATE of bug 1436873

(Core :: Security: PSM, defect)

Description

[S.Amposta]

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:58.0) Gecko/20100101 Firefox/58.0
Build ID: 20180206200532

Steps to reproduce:

Firefox 59, 64bits on Windows 10 Pro
Export a certificate to a p12 file
Try to import into Internet explorer (or google Chrome)


Actual results:

I get the error from IE: Invalid password.


Expected results:

It should have been imported with no issue.

Notes:
1) If you import the P12 into Firefox 58, and export to p12 from Firefox 58, you can import it into IE with no problem.
2) I've printed info of both P12 using Openssl. "Importable" p12, has 100,000 iterations and "Not importable" has 1,000,000 Iterations. Just in case it is important

Comment 1

[Cosmin Muntean [:cmuntean], Ecosystem QA]

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0
Firefox: 61.0a1, Build ID: 20180319220116

I have managed to reproduce this issue on latest Firefox (59.0.1) release and latest Nightly (61.0a1) build. The issue is reproducible if you try to import an exported certificate from Firefox in Chrome or Internet Explorer. Tested on Windows 7 x64 and Windows 10 x64. 

It seems that the issue is not reproducible using Firefox 58.0.2 release. Considering this I have used the mozregression tools and I have found the regression range. Here are the results:

Last good revision: f9b391e62608afe47cb5d9269a4afee6472bb1d4
First bad revision: 45e4387bc585d3187d5fd945c2115e75195b0bfa
Pushlog: https://goo.gl/FuUPCE

Looks like bug 1420060 introduced this issue.
Franziskus can you please take a look at this?

Comment 3

[Liz Henry (:lizzard) (relman/hg->git project)]

Too late to fix in 59. I'll follow up in the duplicate bug.