357593 - PSM cannot display givenName and surname in DNs

Status: RESOLVED FIXED

(Core :: Security: PSM, defect)

Description

[Martin v. Löwis]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7) Gecko/20060830 Firefox/1.5.0.7 (Debian-1.5.dfsg+1.5.0.7-2)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7) Gecko/20060830 Firefox/1.5.0.7 (Debian-1.5.dfsg+1.5.0.7-2)

If a certificate contains only a givenname+surname pair, PSM will not display the certificate correctly.

Reproducible: Always

Steps to Reproduce:
1.Import the attached certificate
2.view it (in the web server tab, under the Foo organization)
3.inspect the details/subject
Actual Results:  
The certificate is displayed as "no nickname". for the subject, object identifiers are displayed.

Expected Results:  
As the nickname, givenname+" "+surname should be used. In the details, the givenName should be displayed as, say, GN= and SN=, in accordance with
http://www.cs.kent.ac.uk/pubs/2002/2141/content.txt

Import of the certificate may entirely fail, depending on the PSM version used. I succeeded importing it with the current CVS version of PSM.

Comment 1

[Martin v. Löwis]

Attachment: Demo certificate

Comment 2

[Honza Bambas (:mayhemer)]

Attachment: Fix1

Added locales/cases for surname and given name OIDs.
This modifies locales.

Comment 3

[Kai Engert (:KaiE:)]

Comment on attachment 315510 [details] [diff] [review]
Fix1

Looks good to me, however, we can not check it in yet. We must wait until after Mozilla trunk has branched for FF 3.

Comment 4

[Honza Bambas (:mayhemer)]

Landed on moz-central as db06e976549b.

Comment 5

[Serge Gautherie (:sgautherie)]

(In reply to comment #4)
> Landed on moz-central as db06e976549b.

This never happened, afaict.

Comment 6

[Honza Bambas (:mayhemer)]

http://hg.mozilla.org/mozilla-central/rev/09f9d992ab97

Comment 7

[Monty Fewings]

(In reply to Martin v. Löwis from comment #0)

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7)
Gecko/20060830 Firefox/1.5.0.7 (Debian-1.5.dfsg+1.5.0.7-2)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7)
Gecko/20060830 Firefox/1.5.0.7 (Debian-1.5.dfsg+1.5.0.7-2)

If a certificate contains only a givenname+surname pair, PSM will not
display the certificate correctly.

Reproducible: Always

Steps to Reproduce:
1.Import the attached certificate
2.view it (in the web server tab, under the Foo organization)
3.inspect the details/subject
Actual Results:
The certificate is displayed as "no nickname". for the subject, object
identifiers are displayed.
https://topfreepornsites.me

Expected Results:
As the nickname, givenname+" "+surname should be used. In the details, the
givenName should be displayed as, say, GN= and SN=, in accordance with
http://www.cs.kent.ac.uk/pubs/2002/2141/content.txt
https://hotmyfreecams.com
Import of the certificate may entirely fail, depending on the PSM version
used. I succeeded importing it with the current CVS version of PSM.

Comment 8

[Yevette Wedge]

(In reply to Martin v. Löwis from comment #0)

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7)
Gecko/20060830 Firefox/1.5.0.7 (Debian-1.5.dfsg+1.5.0.7-2)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7)
Gecko/20060830 Firefox/1.5.0.7 (Debian-1.5.dfsg+1.5.0.7-2)

If a certificate contains only a givenname+surname pair, PSM will not
display the certificate correctly.

Reproducible: Always

Steps to Reproduce:
1.Import the attached certificate
2.view it (in the web server tab, under the Foo organization)
3.inspect the details/subject
Actual Results:
The certificate is displayed as "no nickname". for the subject, object
identifiers are displayed.
https://goodpornsites.pro/
Expected Results:
As the nickname, givenname+" "+surname should be used. In the details, the
givenName should be displayed as, say, GN= and SN=, in accordance with
http://www.cs.kent.ac.uk/pubs/2002/2141/content.txt
https://hotmyfreecams.com/
Import of the certificate may entirely fail, depending on the PSM version
used. I succeeded importing it with the current CVS version of PSM.

thx