151400 - Personal Certificate selection dialog slow to appear

Status: VERIFIED DUPLICATE of bug 139802

(Core Graveyard :: Security: UI, defect)

Description

[kpruden]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-US; rv:1.1a) Gecko/20020610
BuildID:    2002061014

If I access a site which requires a client-side (personal) certificate, the
dialog box to choose which certificate to use is extremely slow (in the order of
40 seconds) to appear.  This doesn't seem to happen with the linux version of
Mozilla.

I am currently running MacOS X 10.1.5, but I've been seeing this behaviour
consistently since I started using Mozilla on the Mac (around the 0.9.7 on
10.1.1 timeframe I think).

Reproducible: Always
Steps to Reproduce:
1) I enter an https:// URL to a site which requires a client-side certificate
2) Within a second or two, a warning dialog pops up warning me that the name
(CN) on the server's certificate does not match the name of the site.  This is a
peculiarity of the site I am accessing and isn't a problem.
3) After I press OK, there is a very long delay (the one time I timed it it took
40 seconds) before the dialog prompting me to select a personal certificate
appears.  During this delay, the CPU utilization of Mozilla jumps up to 15-20%
(as reported by top)
4) Once I select a certificate, the remaining steps proceed at a reasonable pace.

I'm afraid I cannot give you a URL to a site which produces this behaviour, as
the sites I am accessing are private to my employer and not accessible from the
outside world.

Actual Results:  As indicated, Mozilla functions correctly, but there is an
unnacceptably long delay in displaying the certificate selection dialog

Expected Results:  The certificate selection dialog should appear in less time.
 Mozilla on linux produces the dialog almos immediately, as does netscape, and
IE on windows.

Comment 1

[Greg K.]

Related to bug 147979? kpruden, can you retest using a 6/13 trunk build?

Comment 2

[kpruden]

I retried with the latest trunk build (ID 2002062008), with the same behaviour.

Comment 3

[Greg K.]

qawanted. Someone more knowledgable about certificates needs to triage this.

Sending to Security: General for the time being.

Comment 4

[Matthias Versen [:Matti]]

-> PSM

Comment 5

[John Unruh]

*** This bug has been marked as a duplicate of 139802 ***

Comment 6

[John Unruh]

Verified dupe.