335393 - 042306 Nightly Build adds support for P12 Certs, but Certs do not show up in the app - no response

Status: RESOLVED FIXED

(Camino Graveyard :: Security, defect)

Description

[bart]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.0.2) Gecko/20060308 Firefox/1.5.0.2
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.0.2) Gecko/20060308 Firefox/1.5.0.2

Attempted to add a P12 Cert to the latest build of Camino.  While the finder now shows the cert, when I click it and add it, nothing happens - I'm not prompted for the password for the cert and it doesn't show up on the list.

Reproducible: Always

Steps to Reproduce:
1.Open Camino Preferences, go to Security Tab, click on Manage Certs
2.Click on Import
3.Find P12 Cert, Click OK
4.Nothing happens

Comment 1

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

Simon, do we not actually support this cert format?

Comment 2

[Håkan Waara]

Well if firefox has this, but not us, are missing something from NSS?

Comment 3

[Mark Mentovai]

If this is broken and can't be easily and quickly fixed, we should back bug 329081 out for 1.0.1.  The "final real notes" will also need to be adjusted.

Comment 4

[Simon Fraser [no longer active]]

I think the short story is that .p12 files are used for Backup/Restore, but not Import. I could be wrong though. Someone should look through the code path when a .p12 file is Imported in FF.

Comment 5

[Mark Mentovai]

Simon's got it.  You add your own certificates in PKCS#12 format to the database with Restore, not Import.  This works.

Having options available for both Restore and Import seems a little dubious to me.  Firefox calls the Restore (of PKCS#12) of personal certificates "Import" - the Import button performs a PKCS#12 restore to the personal certificate store when clicked in the "Your Certificates" tab.  "Import" imports (non-personal) certificates when clicked in any other tab, and the "Backup" buttons aren't available in those cases either.  I think that the Firefox UI is a little bit more intuitive, and maybe the Camino action menu should behave similarly.  Someone can file a bug on that.

Someone can maybe also file a bug about displaying an alert when certificate import (or restoration) fails.

Someone can file yet another bug about changing "Backup" to "Back Up"

I've backed bug 329081 out from all branches.

Comment 6

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

(In reply to comment #5)
> [...]  I think that the Firefox UI is a little bit
> more intuitive, and maybe the Camino action menu should behave similarly. 
> Someone can file a bug on that.
> 
> Someone can maybe also file a bug about displaying an alert when certificate
> import (or restoration) fails.
> 
> Someone can file yet another bug about changing "Backup" to "Back Up"

Filed bug 335635, bug 335636, and bug 335637, respectively, on those.

Comment 7

[Håkan Waara]

Thanks for backing this out, Mark.