155908 - Failed to import a PK12 certificate

Status: RESOLVED INCOMPLETE

(Core Graveyard :: Security: UI, defect, P2)

Description

[Nenad Andjelic]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0.0) Gecko/20020530
BuildID:    2002053012

Got: "the pkcs #12 operation failed for unknown reasons"
when I tried to import my PK12 cert into Mozilla.

Supplied correct store and cert protect password.

Managed to import the same cert into Internet Explorer.



Reproducible: Always
Steps to Reproduce:
1.Edit -> Preferences -> Privacy & Security -> Certificates -> Manage
Certificates -> Import -> "PICKED a PK12 file on my local drive"
2. Entered changeit as password for my secure store
3. Entered password used to encrypt this cert file
4. Received an error (alert) "the pkcs #12 operation failed for unknown reasons"
5. This sucks!

Actual Results:  The cert was not imported.

Expected Results:  Cert should have been installed and shown in "Your
certificates" tab.

Comment 1

[Matthias Versen [:Matti]]

-> PSM

Comment 2

[Stephane Saux]

reporter: Please try with a recent moz 1.0 branch build.

Comment 3

[John Unruh]

Probably a dupe of bug 139196

Comment 4

[John Unruh]

According to Entrust, "Entrust Entelligence™ E-mail Plug-in provides security 
for internal and external e-mail communications when used with e-mail 
applications such as Microsoft® Exchange™, Microsoft® Outlook™, and Lotus® 
Notes™."
It's possible that the certificate is designed not to work with Mozilla.

Comment 5

[Stephane Saux]

It's possible that the cert contains a critical extension that we do not recognize.

I'll ask my contacts at Entrust.

Kai have you looked at handling more errors in the pkcs#12 import code?

Comment 6

[Kai Engert (:KaiE:)]

NSS has a large list of potential error messages, I don't know which error
messages should have more detailed messages. Right now this message is shown for
any failure within NSS.

Comment 7

[John Unruh]

Setting to new.

Comment 8

[Kai Engert (:KaiE:)]

changing obsolete psm* target to --- (unspecified)

Comment 9

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

Is this still an issue?