1615612 - about:certificate chain download gives entire encoding on one line

Status: RESOLVED FIXED

(Firefox :: Security, defect, P3)

Description

[Will Dickson]

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:72.0) Gecko/20100101 Firefox/72.0

Steps to reproduce:

1. In Certificate Manager UI, "Your Certificates" tab, import a (client) certificate from a P12.

2. In Certificate Manager UI, choose the "View" button.

3. In the about:certificate tab which appears, go to the "Miscellaneous" section and click the "PEM (chain)" link. Download the file which Firefox offers.

Actual results:

The Base64-encoding of the certificate appears on a single, very long, line, viz:

-----BEGIN CERTIFICATE-----
<Base64 further than the eye can see...>
-----END CERTIFICATE-----

Expected results:

The Base64 encoding is wrapped over several lines, just like for the "PEM (cert)" link which is adjacent to the "PEM (chain)" link. Viz:

-----BEGIN CERTIFICATE-----
<Base64>
<More Base64>
<etc etc etc.>
-----END CERTIFICATE-----

Comment 1

[Virginia (please send need info request to Brindusa Tot)]

Hi Will,

Thanks for your report.

I tried to reproduce this on Ubuntu 18.04 LTS 64-bit using Firefox Nightly 75.0a1 (2020-02-18), downloading a test certificate from here https://itv.mit-xperts.com/clientssl/issue/dload/index.php?id=1571753451 , but I'm unable to reproduce the actual result you are seeing.

Could you share a client certificate P12 file so we can test it on our end? You can attach it to this bugzilla ticket.

Also, could you please import the certificate to Firefox Nightly version and confirm if you are getting the same actual result? You can download Nightly from here: https://nightly.mozilla.org/.

In the meantime, I'll add a product and component to this issue.

Regards,
Virginia

Comment 2

[Dana Keeler (she/her) (use needinfo) [:keeler]]

A client certificate isn't necessary to reproduce this bug - using a certificate from the "Authorities" tab works.

Comment 3

[Will Dickson]

(In reply to Virginia Balducci from comment #1)

Hi Will,

Thanks for your report.

I tried to reproduce this on Ubuntu 18.04 LTS 64-bit using Firefox Nightly 75.0a1 (2020-02-18), downloading a test certificate from here https://itv.mit-xperts.com/clientssl/issue/dload/index.php?id=1571753451 , but I'm unable to reproduce the actual result you are seeing.

Could you share a client certificate P12 file so we can test it on our end? You can attach it to this bugzilla ticket.

Also, could you please import the certificate to Firefox Nightly version and confirm if you are getting the same actual result? You can download Nightly from here: https://nightly.mozilla.org/.

In the meantime, I'll add a product and component to this issue.

Regards,
Virginia

Hi Virginia,

I'm seeing the same result on Firefox Nightly, and when using the cert from the link you give above. Is it possible that your text editor (or whatever you used to show the output) is word-wrapping it?

In view of this, and the comments below, do you still need my client cert? (The one I have is "live", so I'd need to generate an alternative keypair and chain to upload.)

KR

Will.

Comment 6

[Julien Cristau [:jcristau]]

Attachment: Bug 1615612 - wrap lines at 64 characters when downloading certificate chain from the cert viewer.

Comment 7

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/a6bfd69fafe7
wrap lines at 64 characters when downloading certificate chain from the cert viewer. r=johannh

Comment 8

[Alexandru Michis [:malexandru]]

https://hg.mozilla.org/mozilla-central/rev/a6bfd69fafe7