357595 - Importing non-email certificates into the "people" tab succeeds with no apparent result

Status: NEW

(Core :: Security: PSM, defect, P5)

Description

[Martin v. Löwis]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7) Gecko/20060830 Firefox/1.5.0.7 (Debian-1.5.dfsg+1.5.0.7-2)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7) Gecko/20060830 Firefox/1.5.0.7 (Debian-1.5.dfsg+1.5.0.7-2)

When the certificate imported in the "Other People's" tab isn't an email certificate (i.e. has no email address in it), import succeeds, yet the certificate isn't displayed. Instead, it shows up in the "Web sites" tab.

Reproducible: Always

Steps to Reproduce:
1.Import the attached certificate in the Other People's tab
2.Look at the list of Other people's certificate
3.

Actual Results:  
The certificate does not appear.

Expected Results:  
The certificate should appear in the list, or a warning should be displayed that the certificate was added to a different list.

Even though the certificate attached is for a person, it cannot readily be used as an email certificate, because no email address is encoded (OTOH, the email tool could ask interactively what certificate to use when it wants to encrypt a message). PSM, when creating the lists of certificates, computes a type for each one, and orders the certificates according to their types.

When ImportEmailCertificate finds that the imported certificate isn't an email certificate, it should display a warning. Alternatively/additionally, certificates  could get classified more generously as email certificates when they seem to refer to a person (e.g. when the CN is not a dotted name).

Comment 1

[Martin v. Löwis]

Attachment: Demo certificate

Comment 2

[Kai Engert [:KaiE:]]

Mass change owner of unconfirmed "Core:Security UI/PSM/SMime" bugs to nobody.
Search for kaie-20100607-unconfirmed-nobody