Closed Bug 1615612 Opened 5 years ago Closed 3 years ago

about:certificate chain download gives entire encoding on one line

Categories

(Firefox :: Security, defect, P3)

72 Branch
defect

Tracking

()

RESOLVED FIXED
88 Branch
Tracking Status
firefox88 --- fixed

People

(Reporter: will.dickson, Assigned: jcristau)

References

(Blocks 1 open bug)

Details

Attachments

(1 file)

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:72.0) Gecko/20100101 Firefox/72.0

Steps to reproduce:

  1. In Certificate Manager UI, "Your Certificates" tab, import a (client) certificate from a P12.

  2. In Certificate Manager UI, choose the "View" button.

  3. In the about:certificate tab which appears, go to the "Miscellaneous" section and click the "PEM (chain)" link. Download the file which Firefox offers.

Actual results:

The Base64-encoding of the certificate appears on a single, very long, line, viz:

-----BEGIN CERTIFICATE-----
<Base64 further than the eye can see...>
-----END CERTIFICATE-----

Expected results:

The Base64 encoding is wrapped over several lines, just like for the "PEM (cert)" link which is adjacent to the "PEM (chain)" link. Viz:

-----BEGIN CERTIFICATE-----
<Base64>
<More Base64>
<etc etc etc.>
-----END CERTIFICATE-----

Hi Will,

Thanks for your report.

I tried to reproduce this on Ubuntu 18.04 LTS 64-bit using Firefox Nightly 75.0a1 (2020-02-18), downloading a test certificate from here https://itv.mit-xperts.com/clientssl/issue/dload/index.php?id=1571753451 , but I'm unable to reproduce the actual result you are seeing.

Could you share a client certificate P12 file so we can test it on our end? You can attach it to this bugzilla ticket.

Also, could you please import the certificate to Firefox Nightly version and confirm if you are getting the same actual result? You can download Nightly from here: https://nightly.mozilla.org/.

In the meantime, I'll add a product and component to this issue.

Regards,
Virginia

Component: Untriaged → Security
Flags: needinfo?(will.dickson)
Product: Firefox → Core

A client certificate isn't necessary to reproduce this bug - using a certificate from the "Authorities" tab works.

Product: Core → Firefox
Blocks: cert-viewer
Priority: -- → P3
Status: UNCONFIRMED → NEW
Ever confirmed: true

(In reply to Virginia Balducci from comment #1)

Hi Will,

Thanks for your report.

I tried to reproduce this on Ubuntu 18.04 LTS 64-bit using Firefox Nightly 75.0a1 (2020-02-18), downloading a test certificate from here https://itv.mit-xperts.com/clientssl/issue/dload/index.php?id=1571753451 , but I'm unable to reproduce the actual result you are seeing.

Could you share a client certificate P12 file so we can test it on our end? You can attach it to this bugzilla ticket.

Also, could you please import the certificate to Firefox Nightly version and confirm if you are getting the same actual result? You can download Nightly from here: https://nightly.mozilla.org/.

In the meantime, I'll add a product and component to this issue.

Regards,
Virginia

Hi Virginia,

I'm seeing the same result on Firefox Nightly, and when using the cert from the link you give above. Is it possible that your text editor (or whatever you used to show the output) is word-wrapping it?

In view of this, and the comments below, do you still need my client cert? (The one I have is "live", so I'd need to generate an alternative keypair and chain to upload.)

KR

Will.

Flags: needinfo?(will.dickson)
Assignee: nobody → jcristau
Status: NEW → ASSIGNED
Pushed by jcristau@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/a6bfd69fafe7
wrap lines at 64 characters when downloading certificate chain from the cert viewer. r=johannh
Status: ASSIGNED → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → 88 Branch
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: