946156 - importing PKCS#12 in Firefox fails with unknown error

Status: RESOLVED INCOMPLETE

(Core :: Security: PSM, defect)

Description

[Iñigo Barreira]

Attachment: Cert 2k y sha256 - Desarrollo.zip

User Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; EJGVNET)

Steps to reproduce:

Hi, we´re updating our end certs to SHA256 and 2K and when trying to import a p12 in Firefox 25 fails with a message saying "the PKCS#12 operation failed by unknown reasons". It asks for the password but after that we receive this message. When doing the same with SHA1 and 2K certs works perfectly.
Steps done:
1.- Go to options --> certificates --> see certificates
2.- Click on import button
3.- Select the p12 file (SHA2 and 2K)
4.- Introduce the password
And then get the error message

One curious thing, after retrying sometimes, you can import just one of the different files we have, but it´s not the same file and not trying the same number of times.

Attached are some certs for testing and passwords.

Comment 1

[Iñigo Barreira]

Attachment: Screenshot

Comment 2

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Is this still an issue?

Comment 3

[Iñigo Barreira]

Hi,

well, somehow. It works for physical person certificates but it does not work for legal persons certificates. Very weird. I see in both type of certificates that key Usage and Extended Key Usage are the same, and the only difference is in the subject field, which I don´t see of that importance to import into Firefox.
We´ll keep investigating why this is happening.

Regards

Comment 4

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Ok - thanks for the response. We'll wait to see what your investigations turn up. Let me know if there's anything I can do to help.