1989100 - Policies Unable to add certificate through group policy - (NS_ERROR_ILLEGAL_VALUE) [nsIX509CertDB.constructX509FromBase64]

Status: UNCONFIRMED

(Thunderbird :: Security, defect)

Description

[Orion Poplawski]

Attachment: ca.pem

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0

Steps to reproduce:

I created a Thunderbird Group Policy object to import a certificate in C:\ssl\certs\ca.pem per https://github.com/thunderbird/policy-templates/tree/master/docs/templates/central#certificates--install

Actual results:

Policies: Unable to add certificate - C:\ssl\certs\ca.pem NS_ERROR_ILLEGAL_VALUE: Component returned failure code: 0x80070057 (NS_ERROR_ILLEGAL_VALUE) [nsIX509CertDB.constructX509FromBase64]
onloadend resource:///modules/policies/Policies.sys.mjs:407
Policies.sys.mjs:411:28
onloadend resource:///modules/policies/Policies.sys.mjs:411

Expected results:

The certificate should have been imported. I can manually import that certificate just fine.

Comment 1

[Orion Poplawski]

I am able to import a different CA in a file named .crt. So it seems to be something to do with this particular cert. It is our Active Directory CA cert.