306728 - nsIX509CertDB::ImportCertsFromFile doesn't tell me how many certs were imported

Status: RESOLVED WONTFIX

(Core :: Security: PSM, defect)

Description

[Simon Fraser [no longer active]]

I'm calling nsIX509CertDB::ImportCertsFromFile in an embedding app to allow the
user to import certs from files.

However, nsIX509CertDB::ImportCertsFromFile() doesn't tell me how many certs
were in the file, and how many of those were imported successfully; even if none
of the certs were imported (because their validity check failed), the method
just returns NS_OK.

This prevents me from creating a good user experience; I can't tell the user why
no new certs appear when they try to import.

Also, I wonder why this method has to check the cert chain before importing. Why
not just import all the certs, even if they don't have valid chains? Shouldn't I
be able to make the chain valid later by adding an issuer cert?

Comment 1

[Kai Engert (:KaiE:)]

reassign bug owner.
mass-update-kaie-20120918

Comment 2

[Dana Keeler (she/her) (use needinfo) [:keeler]]

It doesn't seem like this is an urgently-needed feature.