446335 - Add button to restore default root certificates

Status: NEW

(Core :: Security: PSM, defect, P5)

Description

[Jo Hermans]

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.2pre) Gecko/2008071706 GranParadiso/3.0.2pre ID:2008071706

In the dialog box at Tools->Options->Advanced->Encryption->View Certificates->Authorities, there's no way to restore the default set of certificate authorities, when you have been adding or deleting CA's. You can see a bit which ones can be safely removed (the ones marked 'Software Security Device' where added manually or automatically when they're part of a chain), but you can't see which root CA was added (I noticed that the one from cacert.org was marked as 'Built in' !). And if you deleted some CA (which was a bit of a surprise when I first noticed it), you can't restore it.

Can we add a 'Restore Defaults' button ? I guess that would re-install the default cert8.db and secmoc.db database files.

Note that I'm only talking about the Authorities tab - the exceptions that you added manually (server tab) or the special certificates on the People tab should not be deleted.

Comment 1

[Jo Hermans]

I know that you can always delete the cert8.db file (I'm doing it often enough for bug 505029), but I was just looking for an easier way to do it in the browser itself.