453664 - Certificate store

Status: VERIFIED DUPLICATE of bug 383988

(Camino Graveyard :: Security, defect)

Description

[dhiva]

User-Agent:       Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_4; en-us) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1
Build Identifier: Version 1.6.3 (1.8.1.16 2008080311)

I was not able to trust a root certificate.  I was able to install a self signed root certificate, but not been able to change the trust settings. The interface does not like some data in that certificate, because of that it doesn't want to trust that certificate. I was able to install and trust other Root CA certificate.
My observation:-
1. It doesnt want to trust a Self Signed Root CA certificate, if it has an email address attached to it (like subAltName Extension).
2. thats the only difference i see from the two different Root CA certificates i try to install

Reproducible: Always

Steps to Reproduce:
1.http://www.es.net/ca/ESnet-Root-CA-1/
2.download the PEM encoded or DER encoded signing cert
3.Install this certificate going to Preferences - Security - Show certificates - Authorities
4. try to import this cert


Actual Results:  
you can see this certificate in the list showing 'unable to verify'

Expected Results:  
it should show up as 'valid' 

I don't know. The software is parsing the certificate and doing some kind of validation.
That validation procedure may have some bugs.

It is a major bug, because every other browser accepts this certificate(including the mozilla family).

Comment 1

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

In the meantime, you can use 1.0.6 to import the certificate and set the trust settings.