about:certificate chain download gives entire encoding on one line
Categories
(Firefox :: Security, defect, P3)
Tracking
()
Tracking | Status | |
---|---|---|
firefox88 | --- | fixed |
People
(Reporter: will.dickson, Assigned: jcristau)
References
(Blocks 1 open bug)
Details
Attachments
(1 file)
User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:72.0) Gecko/20100101 Firefox/72.0
Steps to reproduce:
-
In Certificate Manager UI, "Your Certificates" tab, import a (client) certificate from a P12.
-
In Certificate Manager UI, choose the "View" button.
-
In the about:certificate tab which appears, go to the "Miscellaneous" section and click the "PEM (chain)" link. Download the file which Firefox offers.
Actual results:
The Base64-encoding of the certificate appears on a single, very long, line, viz:
-----BEGIN CERTIFICATE-----
<Base64 further than the eye can see...>
-----END CERTIFICATE-----
Expected results:
The Base64 encoding is wrapped over several lines, just like for the "PEM (cert)" link which is adjacent to the "PEM (chain)" link. Viz:
-----BEGIN CERTIFICATE-----
<Base64>
<More Base64>
<etc etc etc.>
-----END CERTIFICATE-----
Hi Will,
Thanks for your report.
I tried to reproduce this on Ubuntu 18.04 LTS 64-bit using Firefox Nightly 75.0a1 (2020-02-18), downloading a test certificate from here https://itv.mit-xperts.com/clientssl/issue/dload/index.php?id=1571753451 , but I'm unable to reproduce the actual result you are seeing.
Could you share a client certificate P12 file so we can test it on our end? You can attach it to this bugzilla ticket.
Also, could you please import the certificate to Firefox Nightly version and confirm if you are getting the same actual result? You can download Nightly from here: https://nightly.mozilla.org/.
In the meantime, I'll add a product and component to this issue.
Regards,
Virginia
Comment 2•5 years ago
|
||
A client certificate isn't necessary to reproduce this bug - using a certificate from the "Authorities" tab works.
Updated•5 years ago
|
Updated•5 years ago
|
Reporter | ||
Comment 3•5 years ago
|
||
(In reply to Virginia Balducci from comment #1)
Hi Will,
Thanks for your report.
I tried to reproduce this on Ubuntu 18.04 LTS 64-bit using Firefox Nightly 75.0a1 (2020-02-18), downloading a test certificate from here https://itv.mit-xperts.com/clientssl/issue/dload/index.php?id=1571753451 , but I'm unable to reproduce the actual result you are seeing.
Could you share a client certificate P12 file so we can test it on our end? You can attach it to this bugzilla ticket.
Also, could you please import the certificate to Firefox Nightly version and confirm if you are getting the same actual result? You can download Nightly from here: https://nightly.mozilla.org/.
In the meantime, I'll add a product and component to this issue.
Regards,
Virginia
Hi Virginia,
I'm seeing the same result on Firefox Nightly, and when using the cert from the link you give above. Is it possible that your text editor (or whatever you used to show the output) is word-wrapping it?
In view of this, and the comments below, do you still need my client cert? (The one I have is "live", so I'd need to generate an alternative keypair and chain to upload.)
KR
Will.
Assignee | ||
Comment 6•4 years ago
|
||
Updated•4 years ago
|
Comment 8•4 years ago
|
||
bugherder |
Description
•