883074 - Default nickname for importPKCS12 is "Imported Certificate #N"

Status: RESOLVED WONTFIX

(Core :: Security: PSM, defect)

Description

[Yoshi Cheng-Hao Huang [:allstars.chh][:allstarschh][:yoshi]]

I have discussed this problem in [1], 
Currently Gecko uses "Imported Certificate #N" as default nickname when importing PKCS 12 file.

We'd try to make this nickname more friendly or more easier to understand.
In order to do that we need a better way to determine the 'default pattern for nickname'.
Also Ryan Sleevi has pointed out the related problem in [2].



[1]: https://groups.google.com/forum/?fromgroups#!topic/mozilla.dev.tech.crypto/tc_92rN4INE
[2]: https://code.google.com/p/chromium/issues/detail?id=237870

Comment 1

[Ken Chang[:kenkai]]

Chulee, in your design, is this bug still a blocker? If yes, please take this bug. Thanks.

Comment 2

[Chuck Lee [:chucklee, Triggered by NI, Review, and Feedback requests]]

This bug might not be necessary if patch in bug 917102 is accepted.

Comment 3

[Chuck Lee [:chucklee, Triggered by NI, Review, and Feedback requests]]

Importing PKCS#12 is move out of scope of 1.3, so this but won't be 1.3+ anymore.

Comment 4

[Vincent Chang[:vchang][changyihsin]]

Hi Chuck, do we still need this one? Can we close it if it is invalid?

Comment 5

[Chuck Lee [:chucklee, Triggered by NI, Review, and Feedback requests]]

I am working on bug 1113453 providing NSS API to modify certificate nickname while importing PKCS12 files.
Bug 1012549 will use that API directly instead of using PSM.
It seems PSM module and webcrypto API doesn't need this for now, I think we can set this but to wont't fix.