39498 - Unable to import certificates with serial numbers of "00" and "01" from the same CA

Status: RESOLVED WORKSFORME

(NSS :: Libraries, defect, P3)

Description

[Fred Roeber]

This is a replacement bug for Netscape bug
http://scopus/bugsplat/show_bug.cgi?id=78997

Communicator will not add a certificate to the database with a serial number of
"01", if it already has a certificate issued by the same CA with a serial number
of "00".

------- Additional Comments From paulmac  03/30/1999 11:40 ------- 

Moving all Security TFV 5.0 bugs to TFV 5.0 SF1in in preparation for moving them 
to Bugzilla (per leger)

------- Additional Comments From relyea  Jun-09-1999 14:28 ------- 

This is weird... obviously NSS cert code

------- Additional Comments From relyea  Jun-09-1999 14:28 ------- 

This is weird... obviously NSS cert code

------- Additional Comments From mwelch  Jul-01-1999 08:48 ------- 

This looks like a very narrow edge case, but just in case: is this something we
realistically have to deal with in [PSM]?

Comment 1

[Wan-Teh Chang]

Set Target Milestone 4.0.

Comment 2

[John Vandenberg]

Is this an SGI specific problem?  If so I would like to test if this is still a 
problem.

Comment 3

[Wan-Teh Chang]

No, this is not an SGI specific bug.  (The bug reporter had
an SGI box.)

Comment 4

[Wan-Teh Chang]

Changed the QA contact to Bishakha.

Comment 5

[Bishop Clark (LC957)]

This looks to be working in 173:  I just imported an 01 cert where I had an 00
cert before.  I am probably out to lunch, but can we get a re-evaluation on this
bug?

Comment 6

[Julien Pierre]

I created certs with serial numbers 0 and 1 from the same CA , the clientCA from our test suite. Here are the commands I used.

certutil -d . -S -n Test0 -s "O=bla" -c clientCA -t ,,, -m 0
certutil -d . -S -n Test1 -s "O=bla1" -c clientCA -t ,,, -m 1

It also works fine if they have the same subject and hence the same nickname. 

I also created a new db, and imported both of their DER successfully, along with the CA cert.

Maybe Communicator had a problem showing the 2 certs in that case ?
Anyway, the problem does not exist anymore. Marking WORKSFORME.