316979 - Problem with CamerFirma Certificate

Status: RESOLVED INVALID

(SeaMonkey :: Security, defect)

Description

[alejandro.revuelta.ext]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.0.1) Gecko/20020823 Netscape/7.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.0.1) Gecko/20020823 Netscape/7.0

I have differents certificates in my FireFox, but i can´t autenticate with CamerFirma´s certificates. Because the browser doesn´t show me just this kind of certificates. This application works fine with FNMT (Spanich CA) and ANCERT (Spanish CA). Recently CamerFirma CA has been recognized for Mozilla.

Best regards

Reproducible: Always

Comment 1

[Daniel Veditz [:dveditz]]

I don't see a problem going to http://ws024.juntadeandalucia.es/ (from the URL field above). What am I supposed to do there? None of the links appear to be https, where do certificates come into anything?

Comment 2

[alejandro.revuelta.ext]

Sorry, Daniel. The URL was wrong. The correct URL is:

http://ws025.juntadeandalucia.es:8080/aut/entradaDemo.jsp

If click in this link, the browser have to show you all your certificates in your keystore. But if you have a CamerFirma´s personal certificate, the browser will not show you this kind of certificate. That´s the problem. 

Comment 3

[Arun Prasannan (polar)]

Can you verify whether this is a problem in a recent version of SeaMonkey (http://www.seamonkey-project.org/releases/) please?

Comment 4

[Serge Gautherie (:sgautherie)]

[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.13) Gecko/20060414] (release) (W2Ksp4)
[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a5pre) Gecko/20070515 SeaMonkey/1.5a] (nightly) (W2Ksp4)
[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9pre) Gecko/2008052601 SeaMonkey/2.0a1pre] (nightly) (W2Ksp4)

I get a FNMT certificate, which i add an exception for;
then I am redirected to
<https://ws022.juntadeandalucia.es/firmadigital/servicio/formsBackEnd/errorCertificadoAut.jsp?error=6&zona=null>
[
Error en el proceso de Autenticación
]

*****

(1,5 months later)

No (more) reply from reporter.

MozillaAS v1.0.x is not supported anymore.

(Would have been "Incomplete", now is) R.Invalid

Reopen if you can reproduce with SeaMonkey v1.1.9.