700900 - Changing master password reset the trust settings of an imported CA

Status: RESOLVED WORKSFORME

(NSS :: Libraries, defect)

Description

[John]

Steps to reproduce:

1. Set environment variable NSS_DEFAULT_DB_TYPE=sql
2. Start Firefox
3. Import a CA certificate using Tools > Options > Advanced > Encryption > View Certificates > Authorities > Import
4. Edit CA certificate trust settings and check (select) all trust settings
5. Close Certificate Manager
6. Open Device Manager
7. Select Software Security Device and then click Change Password
8. Enter the current and new passwords in the Change Master Password dialog
9. Close Device Manager
10. Open Certificate Manager and view trust settings of the imported CA... the trust settings are unchecked

Comment 1

[John]

This problem does not occur if using the older DB format.

Comment 2

[Kai Engert [:KaiE:]]

I suspect this bug can no longer be reproduced.

In the past, Firefox used a half-initialized NSS database, meaning, a database which hasn't yet been initialized with a password.

In that half-initialized state, you couldn't reliably set trust flag of the sql database.

Latest Firefox has been changed to always init the password (to the empty string), so it should work now correctly.

I'm sorry that we didn't address this issue earlier. Please reopen if there is still a problem.