Closed Bug 374845 Opened 18 years ago Closed 9 years ago

Unable to Create PKCS12 Backup Files, ALWAYS

Categories

(Core Graveyard :: Security: UI, defect)

x86
Windows XP
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED INCOMPLETE

People

(Reporter: elyop, Unassigned, NeedInfo)

Details

(Whiteboard: [psm-cert-manager])

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; es-AR; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; es-AR; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3 I can install my digital certificate, but when I try to export my certificate Preferences -> Certificates -> Manage Certificates ... -> Backup I then enter master password certificate backup password (2 times) OK resulting in the following alert Failed to create the PKCS #12 backup file for unknown reasons. Reproducible: Always Steps to Reproduce: 1. Get a certificate with 2. Install certificate in Mozilla Firefox 2.0.0.x 3. Export certificate Actual Results: alert Failed to create the PKCS #12 backup file for unknown reasons. Expected Results: Backup Created succesfully Windows XP Spanish Latin-American Mozilla Firefox 2.0.0.x ( all versions have this problem )
The steps for me are Tools->Options on Windows or Edit->Preferences on Linux and then Advanced tab, Encryption, View Certificates, Backup All and it works in today's BonEcho on both Windows and Linux for the en-US version.
I´m trying this feature from firefox v2.0.0.0, always the same result. Also tested the en-us version, with the same result. I´ve tested both options, Backup and Backup All, and the same warning error appears. Do I need something else installed so this feature can work?
Version: unspecified → 2.0 Branch
Does your certificate have any special characters, such as: æ ä Æ ø ü ? Do any certificates in your "certificate chain" have such characters? If so, this is probably a duplicate of bug 217305. It may be useful for you to read the questions in bug 217305 comment 35, and answer them with a follow up comment here in this bug.
Certificate imported 2008-06-16 at 0910 US/Mountain (DST) Firefox 2.0.0.14 _and_ 3.0 RC3 were used (delete before install and re-import) Imported /created directly from CACert interface (https://www.cacert.org/) Expires 2009-06-16 All attempts to export any personal certificate fail with: Failed to create the PKCS #12 backup file for unknown reasons.
Same problem here with FF 3.0 (ua: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9) Gecko/2008052906 Firefox/3.0) Certificate created on 2008-06-23 with FF3.0 on this web site : https://cfspart.impots.gouv.fr/ . Valid until 2011-06-23. The certificate does not contain any special characters.
Hello: I have coments about this at https://bugzilla.mozilla.org/show_bug.cgi?id=440033#c7 Best regards
http://developer.mozilla.org/en/docs/How_to_get_a_stacktrace_with_WinDbg http://developer.mozilla.org/en/docs/Using_the_Mozilla_source_server you're going to need to figure out where the string comes from and trace it back to a message. here's the steps: http://mxr.mozilla.org/seamonkey/search?string=PKCS12UnknownErrBackup http://mxr.mozilla.org/seamonkey/search?string=PIP_PKCS12_BACKUP_FAILED http://bonsai.mozilla.org/cvsblame.cgi?file=/mozilla/security/manager/ssl/src/nsPKCS12Blob.cpp&rev=1.49&mark=85,480-482,886,887,365-366,369-370,377-380,383-384,401-404,434-443,446-450,455,468-469,473-475,477-478#365 basically set breakpoints on all the highlighted lines and figure out which ones fail. note: i don't think we have source server support for 2.x releases, but we definitely should have them for 3.x, so please debug this w/ ff3 or later.
Assignee: nobody → kaie
Component: Preferences → Security: UI
Product: Firefox → Core
QA Contact: preferences → ui
Version: 2.0 Branch → Trunk
I have the same Problem. I haven't even filled the password but firefox already said "alert: Unable to Create PKCS#12 file for unknown reason. PS: I get my certificate from VeriSign.
Mass change owner of unconfirmed "Core:Security UI/PSM/SMime" bugs to nobody. Search for kaie-20100607-unconfirmed-nobody
Assignee: kaie → nobody
Whiteboard: [psm-cert-manager]
I have the same problem with FF 3.6.10. The certificate is from cacert.org and works well in general. The export/backup functionality for getting however doesn't work.
It appears to be working with FF 4.0b6.
Is this still an issue?
Flags: needinfo?(elyop)
Status: UNCONFIRMED → RESOLVED
Closed: 9 years ago
Resolution: --- → INCOMPLETE
Product: Core → Core Graveyard

Hi, sorry to reopen this old thread, I'm experiencing exactly the same problem. Now on Windows 95.0.2 (64-bit), but have seen it since quite some time (not related to the latest release).
Some users have reported the problem related to a spanish national authority [1] and a workaround is suggested to remove this CA, backup and reinstall certs. It does not work to me, maybe some other CA is causing trouble. Any other idea beyond removing one by one CAs?
It does not seem related to any particular cert, backup all fails and backup ingle certs fail too.
what happens to me is, I do the backprocess normally, i'm asked for a password and then after a few seconds get the alert "Failed to create the PKCS #12 backup file for unknown reasons."

thanks for having a look

[1]https://www.sede.fnmt.gob.es/preguntas-frecuentes-certificados-ap/-/asset_publisher/KPzaaIc3paAC/content/1377-error-al-exportar-certificado-personal-desde-firefox?inheritRedirect=false&redirect=https%3A%2F%2Fwww.sede.fnmt.gob.es%2Fpreguntas-frecuentes-certificados-ap%3Fp_p_id%3D101_INSTANCE_KPzaaIc3paAC%26p_p_lifecycle%3D0%26p_p_state%3Dnormal%26p_p_mode%3Dview%26p_p_col_id%3Dcolumn-2%26p_p_col_count%3D1%26_101_INSTANCE_KPzaaIc3paAC_struts_action%3D%252Fasset_publisher%252Fview

What security device is the certificate that you're trying to export on? (second column in the certificate manager)

Flags: needinfo?(francisco.matorras)

Hi,
all certs have as security device "OS client cert token (modern)"

thanks for looking

Francisco

Flags: needinfo?(francisco.matorras)

Those certificates are not stored in Firefox - they're managed by your operating system. See bug 1601787.

But those were initially downloaded and installed from firefox, a copy later loaded to windows and now cannot backup any of the personal certificates from firefox. Is that an expected behaviour?

Essentially, yes. You can use your operating system's certificate manager to export those certificates.

ok, thanks

You need to log in before you can comment on or make changes to this bug.