868373 - Provide a way to import user certificates (with their private keys) from PKCS#12/PFX files (FirefoxOS)

Status: RESOLVED WONTFIX

(Firefox OS Graveyard :: Gaia::Browser, defect, P4)

Description

[Tomas Garcia-Meras]

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:23.0) Gecko/20130502 Firefox/23.0
Build ID: 20130502030939

Steps to reproduce:

There's no way to import user certificates. On desktop Firefox browsers it is done with "Tools" -> "Options" -> "Certificates" -> "View Certificates" -> "Your Certificates" -> "Import", but on Firefox for Firefox OS there is not such option.


Actual results:

It is not possible to access SSL sites with Client Authentication.


Expected results:

I should be able to import my certificate with its private key and then access SSL sites with Client Authentication.

Comment 1

[Guillermo López :willyaranda (probably SLOW response)]

Ben, who should drive this? Tomás from the Spanish company that do everything with electronic certificates, wants to help on this because they want to use Firefox for Android and Firefox (for FirefoxOS) as the base platform for the digital administration in Spain.

This could be a huge win for us.

Comment 2

[Ben Francis [:benfrancis]]

Lucas, do you know if there was a plan for this?

Comment 3

[Lucas Adamski [:ladamski]]

There is no plan for this ATM.  From an internal standpoint, we would include product management to help prioritize the importance of this feature if we want to own this for an upcoming release.  Of course, we're also happy to work with contributors who want to take the lead here.

Comment 4

[ffos-browser]

A Pivotal Tracker story has been created for this Bug: http://www.pivotaltracker.com/story/show/53549551

Comment 5

[Alexander]

FYI I found a way to import client certificates to FFOS 2.0. Based on http://www.pending.io/add-cacert-root-certificate-to-firefox-os/

> adb pull /data/b2g/mozilla/xxx.default/cert9.db
> adb pull /data/b2g/mozilla/xxx.default/key4.db
> adb pull /data/b2g/mozilla/xxx.default/pkcs11.txt
> 
> now add certificate to db:
> pk12util -i user.pkcs12 -d "sql:." #adds your private key to db
> certutil -d "sql:." -K #list your client certificates
> 
> Now upload to device:
> adb shell stop b2g
> adb push cert9.db /data/b2g/mozilla/xxx.default/cert9.db
> adb push key4.db /data/b2g/mozilla/xxx.default/key4.db
> adb push pkcs11.txt /data/b2g/mozilla/xxx.default/pkcs11.txt
> adb shell start b2g

Make note that you need to change `xxx` to your profile string.

I did this in the hope activesync will work for me but it turned out the OS is crashing while trying to establish connection. I have not tested plain browser. Would be interesting to know if plain browser will crash as well but I don't have such sites to check.

Comment 6

[[e-mail]]

Hi Alexander, The user.pkcs12 refers to what file in commond line 'pk12util -i user.pkcs12 -d "sql:."', could give me the path?

Comment 7

[BMO Automation]

Firefox OS is not being worked on