589448 - Errors importing Root Certificates in Thunderbird and Firefox

Status: RESOLVED WORKSFORME

(Core :: Security, defect)

Description

[Frank]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 ( .NET CLR 3.5.30729; .NET4.0E)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.23) Gecko/20090812 Thunderbird/2.0.0.23 Mnenhy/0.7.5.0 and Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 ( .NET CLR 3.5.30729; .NET4.0E)

I have problems with 2 certificates from
https://zertifikate.allgeier.com/pages/cas

In german Thunderbird 3.1.2 under german WinXP with SP3 and all current updates
Signtrust CERT Class 2 CA 4:PN produces an errormessage that translates to
something like "certificate could not be verified for unknown reasons"

Signtrust CERT Class 2 CA 3:PN wouldn't install.
before renaming cert8.db it would produce the following error in the
errorconsole:
Fehler: uncaught exception: [Exception... "Component returned failure code:
0x80004005 (NS_ERROR_FAILURE) [nsIX509CertDB.importCertsFromFile]" nsresult:
"0x80004005 (NS_ERROR_FAILURE)" location: "JS frame ::
chrome://pippki/content/certManager.js :: addCACerts :: line 557" data: no]

after renaming cert8.db the error changed to:
Fehler: uncaught exception: [Exception... "Component returned failure code:
0x80004005 (NS_ERROR_FAILURE) [nsIX509CertDB.importCertsFromFile]" nsresult:
"0x80004005 (NS_ERROR_FAILURE)" location: "JS frame ::
chrome://pippki/content/certManager.js :: addWebSiteCert :: line 613" data: no]

In german Firefox 3.6.8 the last certifikate produces an errormessage in the
errorconsole too:
Fehler: Component returned failure code: 0x80004005 (NS_ERROR_FAILURE)
[nsIX509CertDB.importCertsFromFile]
Quelldatei: chrome://pippki/content/certManager.js
Zeile: 613

In windows the certificates install ok and the certificate I manually save from
an e-mail I got verifies ok.

Reproducible: Always

Steps to Reproduce:
1.download certificates
2.import them
3.


Expected Results:  
imported the certificates and verify

Comment 1

[Frank]

This is also reported as Bug 459845 but limited to Firefox. the importance is much bigger in Thunderbird though as it makes it impossible to verify certificates/e-mails from my bank

Comment 2

[Frank]

This is also reported as Bug 459845 but limited to Firefox. the importance is much bigger in Thunderbird though as it makes it impossible to verify certificates/e-mails from my bank

Comment 3

[Rik]

It works!
On Thunderbird 3.1.7 i can import the current Rootcertificates from https://zertifikate.allgeier.com/pages/cas - and all works fine.
 ==>Please try it again with the actual certs.

Comment 4

[Wayne Mery (:wsmwk)]

closing WFM per comment 3.
Frank if you still see this when using a current version, please update the bug.