647726 - The Zumbi CRL that refuses to be excluded

Status: RESOLVED INCOMPLETE

(Core :: Security: PSM, defect)

Description

[Paulo Eduardo Neves]

User-Agent:       Mozilla/5.0 (Windows NT 5.1; rv:2.0) Gecko/20100101 Firefox/4.0
Build Identifier: Firefox 4.0 in Brazillian Portuguese

Very weird bug. When I try to visit some pages (e.g. my delicious bookmarks: http://www.delicious.com/neves/) I see a browser dialog box (see attachment firefox-crl-update-message.png) that says in Brazilian Portuguese:  "Revogated Cerficate List successfully imported...  The automatically updated isn't activated, would you like to activate it?" No matter what I answer, The browser won't let me  visit the page I clicked or put in the URL location. 

Nice, now I just try to kill the CRL. Go to the CRL manager (screenshot 2, firefox-CRL.png), select it, exclude and close the window. 

Try to visit the same page, and see the same message. Go to the CRL manager and the excluded CRL is still there. 


Reproducible: Always

Steps to Reproduce:
1. Go to the CRL Manager (screenshot 2)
2. Select CRL ICP-Brasil
3. Click in exclude button
4. It disappears from the list
5. Close it 
6. Try to visit a page
7. Page is blocked
8. Go to CRL manager and the Zumbi CRL list is still there
Actual Results:  
The installed CRL isn't removed.

Expected Results:  
The CRL to die. Forever.

I'll attach some screenshots.

This bug also happened in Firefox 3.6. The updated was an attempt to solve it. 

I don't know how this CRL first appeared. Maybe there is some connection to the root certificate I installed from this page: 
http://www.receita.fazenda.gov.br/CertificadoSegurancaInvalido/AtualizaNavegadores.htm

May I kill the cert8.db file?

Comment 1

[Paulo Eduardo Neves]

Attachment: The message when I try to visit some URLs.

Couldn't find a rule when the message is displayed.

Comment 2

[Paulo Eduardo Neves]

Attachment: The CRL manager screen, where I try to exclude it

Comment 3

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

CRL manager was removed.