Closed Bug 647726 Opened 11 years ago Closed 8 years ago

The Zumbi CRL that refuses to be excluded

Categories

(Core :: Security: PSM, defect)

x86
Windows XP
defect
Not set
critical

Tracking

()

RESOLVED INCOMPLETE

People

(Reporter: pauloneves, Unassigned)

References

Details

Attachments

(2 files)

User-Agent:       Mozilla/5.0 (Windows NT 5.1; rv:2.0) Gecko/20100101 Firefox/4.0
Build Identifier: Firefox 4.0 in Brazillian Portuguese

Very weird bug. When I try to visit some pages (e.g. my delicious bookmarks: http://www.delicious.com/neves/) I see a browser dialog box (see attachment firefox-crl-update-message.png) that says in Brazilian Portuguese:  "Revogated Cerficate List successfully imported...  The automatically updated isn't activated, would you like to activate it?" No matter what I answer, The browser won't let me  visit the page I clicked or put in the URL location. 

Nice, now I just try to kill the CRL. Go to the CRL manager (screenshot 2, firefox-CRL.png), select it, exclude and close the window. 

Try to visit the same page, and see the same message. Go to the CRL manager and the excluded CRL is still there. 


Reproducible: Always

Steps to Reproduce:
1. Go to the CRL Manager (screenshot 2)
2. Select CRL ICP-Brasil
3. Click in exclude button
4. It disappears from the list
5. Close it 
6. Try to visit a page
7. Page is blocked
8. Go to CRL manager and the Zumbi CRL list is still there
Actual Results:  
The installed CRL isn't removed.

Expected Results:  
The CRL to die. Forever.

I'll attach some screenshots.

This bug also happened in Firefox 3.6. The updated was an attempt to solve it. 

I don't know how this CRL first appeared. Maybe there is some connection to the root certificate I installed from this page: 
http://www.receita.fazenda.gov.br/CertificadoSegurancaInvalido/AtualizaNavegadores.htm

May I kill the cert8.db file?
Couldn't find a rule when the message is displayed.
Component: Security → Security: PSM
QA Contact: toolkit → psm
CRL manager was removed.
Status: UNCONFIRMED → RESOLVED
Closed: 8 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.