657591 - When using custom PKCS11 module, certificates on a smart card that have empty CKA_LABEL value are not shown in personal certificates list and are not usable.

Status: NEW

(Core :: Security: PSM, defect, P5)

Description

[[e-mail]]

User-Agent:       Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Build Identifier: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1

We tested Firefox with our comapany's PKCS11 module and certificates stored on a smart card. Certificates that have empty CKA_LABEL attribute are not visible in the personal certificates list. When the attribute is set to a non empty value, the certificates are loaded in the personal list and become usable.

Reproducible: Always

Steps to Reproduce:
1.Set up any pkcs11 module which allows you to use smart cards.
2.Insert a card containing at least one certificate with public/private key pair. This certificate must have empty PKCS11 CKA_LABEL attribute.
3.Open Certificate manager in Firefox and enter PIN.

Actual Results:  
Certificates with empty CKA_LABEL are not shown in the personal list.

Expected Results:  
Each certificate with existing private key with same ID should be visible in the personal certificates list.

Comment 1

[Kaspar]

Moving to the proper component. I guess it will be resolved as WONTFIX, though - see e.g. bug 286735 comment 2.