248907 - Multiple Certificates having the same subject are not shown in the digital signature select cert combo (only one is shown)

Status: VERIFIED DUPLICATE of bug 278689

(MailNews Core :: Security, defect)

Description

[Ionut Marasescu]

User-Agent:       Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7) Gecko/20040616

I have two (or more) different certificates having exactly the same subject (CA 
may differ). Both are shown in the certificate manager dialog, but only one is 
available in Mail & NewsGroup Account Settings\Security\Digital 
signing\certificate select combo. (both of them are able to do a digital 
signature, if I import only one I知 able to sign with it.). The problem is with 
the software security device.  We've developed our own pkcs11 module (we are 
developing a module for a smartcard that supports 5 certificates), and managed 
to show all the certificates with the some subject in the combo (by making the 
token labels different) , but the message is signed with the first certificate 
in the list (not with the selected one), so I think that the product is 
searching somehow a certificate by subject and not by some unique attribute 
(like serial number) as we expected (if we don't declare the slots as HW in 
order to observe all mozilla calls, at some point we see Mozilla searching a 
certificate only by subject using C_FindObjects). 

Reproducible: Always
Steps to Reproduce:
1. Importing 2 or more different certificates with the same subject (binary 
identical)
2. Selecting Mail&Newsgroup Account settings, security, Digital signing 
3. Pressing select button. 

Actual Results:  
In the certificate combo we see only one certificate (the others having the 
same subject are not shown).

Expected Results:  
Displaying all the certificates (even if they have the same subject). The 
selection can be made by using the serial number.

Comment 1

[Michael Østergaard Pedersen]

I have the exact same problem.

Pressing  the select button under "Account settings, security, Digital signing"
shows me only one certificate even though I have imported two different
certificates with the same subject.

Under "Manage certificates" both of them show up

Using Thunderbird 1.0

This is actually pretty annoying since it's rather common to have the subject be
a persons full name and to have more certificates from different CAs. With this
bug I can only use the first one I imported.

Comment 2

[Mike Cowperthwaite]

*** This bug has been marked as a duplicate of 278689 ***

Comment 3

[Mike Cowperthwaite]

How is this not a dupe?

Comment 4

[Ionut Marasescu]

This is not exactly a dupe because even if: quote from original message: "I 
managed to show all the certificates with the some subject in the combo (by 
making the token labels different) the message is signed with the first 
certificate in the list (not with the selected one)". I would like to see all 
the certificates in the combo by default because I hope that with this ocasion 
they will also fix the mozilla internal certificate selection problem which is 
my main problem: that I want to be able to use all my certificates: I can make 
Mozilla show them all, but when I select a certificate, Mozilla uses another 
one (the first with same subject).

Comment 5

[Gervase Markham [:gerv]]

This is an automated message, with ID "auto-resolve01".

This bug has had no comments for a long time. Statistically, we have found that
bug reports that have not been confirmed by a second user after three months are
highly unlikely to be the source of a fix to the code.

While your input is very important to us, our resources are limited and so we
are asking for your help in focussing our efforts. If you can still reproduce
this problem in the latest version of the product (see below for how to obtain a
copy) or, for feature requests, if it's not present in the latest version and
you still believe we should implement it, please visit the URL of this bug
(given at the top of this mail) and add a comment to that effect, giving more
reproduction information if you have it.

If it is not a problem any longer, you need take no action. If this bug is not
changed in any way in the next two weeks, it will be automatically resolved.
Thank you for your help in this matter.

The latest beta releases can be obtained from:
Firefox:     http://www.mozilla.org/projects/firefox/
Thunderbird: http://www.mozilla.org/products/thunderbird/releases/1.5beta1.html
Seamonkey:   http://www.mozilla.org/projects/seamonkey/

Comment 6

[Ionut Marasescu]

*** This bug has been marked as a duplicate of 278689 ***