Closed Bug 209827 Opened 21 years ago Closed 21 years ago

import of certificate/privatekey+CA-certificate from pkcs12 file fails

Categories

(NSS :: Build, defect)

x86
OS/2
defect
Not set
major

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: hans, Assigned: wtc)

References

Details

(Whiteboard: [3.8.2])

Attachments

(1 file)

User-Agent:       Mozilla/5.0 (OS/2; U; Warp 4.5; en-US; rv:1.4) Gecko/20030616
Build Identifier: Mozilla/5.0 (OS/2; U; Warp 4.5; en-US; rv:1.4) Gecko/20030616

Using Mozilla 1.4 RC2 on OS/2 :

When I try to import a certificate/privatekey+CA-certificate from a pkcs12 file,
import fails with
a dialog:

   The password entered was incorrect.

I am sure that I have entered the correct correct password (testing with '1234'
and ''/blank/no-password).

The pkcs12 keystore has been exported from Mozilla 1.3-final/OS/2 (sorry cannot
see build-id without shutting down this browser)

The pkcs12 keystore has successfully imported into OS/2 Netscape version 4.6x

The pkcs12 keystore has verified using OpenSSL.

The problem has also been observed on the OS/2 build of Mozilla 1.4 RC1.



Reproducible: Always

Steps to Reproduce:
1. Select 'Manage Certificates' Properties->Privacy and Security->Certificates
2. Press Import
3. Pick PKCS12 keystore file
4. Enter correct password for Software Security Device
5. Enter correct password for PCKS12 keystore

Actual Results:  
A Dialog shows the message
   The password entered was incorrect.

Certificate/Privatekey+CA-certificate is not imported.

Expected Results:  
Certificate/Privatekey+CA-certificate imported.
Verified bug in Nigthly build of Mozilla 1.4 for OS/2 found in
   http://ftp.mozilla.org/pub/mozilla/nightly/latest-1.4/

Build Identifier from Help->About page

    Mozilla/5.0 (OS/2; U; Warp 4.5; en-US; rv:1.4) Gecko/20030626

Specified OS/2 as OS
OS: other → OS/2
How did you get a keystore file?
The Certificate was issued in Mozilla 1.3 and exported  to the keystore.

I have tried deleting the certificate and re-imported it in Moz 1.3 without
problems.

I have alse imported it into Mozilla 1.01 witout problems.

But in Moz 1.4 (rc1/rc2 and nightly 26/6) import fails. 

It seems that a wrong password-string passed on from the userinterface.

I have not had time to make a test on other platforms. Sorry.
I just tested with Nightly Mozilla 1.5a

Build ID : Mozilla/5.0 (OS/2; U; Warp 4.5; en-US; rv:1.5a) Gecko/20030602

This also has the problem.


I got time to boot my Suse8.1 Linux disk and made a test with

Mozilla 1.4 RC 2 (to compare with the OS/2 RC2)

Here I can import without problems.

On the 1.4 branch, this is an optimizer bug.

not sure about GCC.

We are working on a fix.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Hi!

I tried with the Mozilla 1.4 (final).

Here import works.

Thanks.
i had to unoptimize some files for this to work on VACPP.
Fix checked into 1.4 branch.

We have other GCC problems with security, so I am going to mark this fixed on VACPP.
Status: NEW → RESOLVED
Closed: 21 years ago
Resolution: --- → FIXED
Michael, does the Mozilla trunk (1.5a) need this fix?
Nope. 1.5a is GCC only and this was a VACPP optimizer bug.

Julian wants to keep VACPP alive with NSS, so he might want this.
I checked in the workaround on the NSS_3_8_BRANCH (3.8.2)
and the NSS tip (3.9).
Whiteboard: [3.8.2]
Target Milestone: --- → 3.9
Blocks: 224532
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: