1746712 - Importing PKCS12 into Your Certificates fails silently

Status: RESOLVED FIXED

(Core :: Security: PSM, defect)

Description

[opensource]

User Agent: Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:88.0) Gecko/20100101 Firefox/88.0

Steps to reproduce:

Fresh install of Firefox on 94.0 build ID 20211102105145 on Fedora Linux.

Go to Preferences > Privacy and Security > View Certificates > Your Certificates > Import.

Open a valid PKCS12 file that does not have read permission for the current user.

There is no error message and Firefox fails silently.

It's irrelevant whether you enter right password (it can't read it anyway).

Actual results:

There is no GUI error message and Firefox fails silently. There is no print to STDOUT or STDERR either. I spent half a day trying Firefox in various containers and VMs before I found the issue.

Expected results:

The user should have gotten a message with the appropriate error (filesystem permission denied).

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::Security: PSM' component, and is moving the bug to that component. Please revert this change in case you think the bot is wrong.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:keeler, could you have a look please?

For more information, please visit auto_nag documentation.

Comment 3

[John Schanck [:jschanck]]

I'm not sure when this was fixed, but the file picker now shows a "Selected file does not have read permission" prompt.