475829 - CACert Certificates not installed or recognized

Status: RESOLVED DUPLICATE of bug 215243

(Core :: Security, defect)

Description

[Joel Goguen]

User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.5) Gecko/2008121623 Ubuntu/8.10 (intrepid) Firefox/3.0.5
Build Identifier: Thunderbird 2.0.0.19 (20090105)

By default, Thunderbird (and Firefox) doesn't include the CACert certificates.  They should be included by default, or recognized when installed on the system.  For example, on Ubuntu this certificate is available as part of the ca-certificates.  Thunderbird should recognize CA certificates installed globally on the system without users being required to import them manually.

Reproducible: Always

Steps to Reproduce:
1. Install ca-certificates (or equivalent package depending on distro)
2. Start Thunderbird
3. Check the list of CAs

Actual Results:  
Although the CACert.org certificate is installed, it is not available in Thunderbird until it is manually imported.

Expected Results:  
The CACert.org certificate installed on the system is available in Thunderbird without manual importing.

For Ubuntu, the ca-certificates package installs everything to /usr/share/ca-certificates/, with various subdirectories containing one or more .crt files.

Comment 1

[Benjamin Smedberg]

If this bug is about CACert, it is a duplicated of bug 215243. If it is about Mozilla reading the system certificate store, I think this is WONTFIX, but if you like you can file a separate bug about that specifically and we can talk about system-NSS, mozilla-NSS, and all that stuff.