Closed Bug 54272 Opened 24 years ago Closed 23 years ago

PSM should not crash when using v2 CRLs

Categories

(Core :: Security: PSM, defect, P3)

1.0 Branch
defect

Tracking

()

VERIFIED WORKSFORME
psm2.0

People

(Reporter: javi, Assigned: ddrinan0264)

References

Details

(Whiteboard: PDT; want plus;)

This is a bug for PSM tracking the NSS bug 54271. When that bug is fixed, this bug can be closed.
Depends on: 54271
Depends on: 53126
No longer depends on: 54271
NSS bug 54271 is a duplicate of NSS bug 53126. Make this bug depend on bug 53126 instead.
Changing QA contact to nitinp
QA Contact: lord → nitinp
Reassigning to javi.
Assignee: lord → javi
QA Contact: nitinp → junruh
Keywords: crash
Target -> 2.0
Target Milestone: --- → 2.0
I believe ddrinan is working on CRL's in PSM 2
Assignee: javi → ddrinan
Fixed in PSM 2.0
Marking fixed per ddrinan's comments. Where can I download v2 CRLs to verify this?
Status: NEW → RESOLVED
Closed: 23 years ago
Keywords: crash
Resolution: --- → FIXED
Reopening. The underlying bug in NSS has only just now been found. This bug can't be resolved until the NSS bug is in place.
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Also, the original Summary was "PSM should not crash when *downloading* v2 CRLs". I've changed it to "PSM should not crash when *using* v2 CRLs".
Summary: PSM should not crash when downloading v2 CRLs → PSM should not crash when using v2 CRLs
If this is tied to the NSS fix, the Summary should be 'PSM should accept v2 CRLs without critical extensions'. As far as the original bug, the original title was correct. PSM was crashing when it tried to load a CRL that NSS didn't like. That particular bug appears to be fixed. bob
The basic idea is "v2 CRLs should work". :-)
Nominating PDT so it makes RTM.
Whiteboard: PDT
Whiteboard: PDT → PDT; want plus;
thomaks set up an in-house CMS server and I was successfully able to import a v2 CRL. It also successfully displayed in the CRL manager. Notice the version number in the DER dump. Certificate Revocation List: Data: Version: v2 Signature Algorithm: SHA1withRSA - 1.2.840.113549.1.1.5 Issuer: CN=Certificate Manager,O=x121x,C=US This Update: Friday, June 22, 2001 2:51:53 PM PDT America/Los_Angeles Next Update: Friday, June 22, 2001 3:11:53 PM PDT America/Los_Angeles Revoked Certificates: 1-4 of 4 Serial Number: 0x8 Revocation Date: Friday, June 22, 2001 1:07:03 PM PDT America/Los_Angeles Serial Number: 0x7 Revocation Date: Friday, June 22, 2001 1:07:02 PM PDT America/Los_Angeles Serial Number: 0x6 Revocation Date: Friday, June 22, 2001 1:07:02 PM PDT America/Los_Angeles Serial Number: 0x5 Revocation Date: Friday, June 22, 2001 1:07:02 PM PDT America/Los_Angeles Extensions: Identifier: CRL Number - 2.5.29.20 Critical: no Number: 463 Signature: Algorithm: SHA1withRSA - 1.2.840.113549.1.1.5 Signature: 08:0A:88:49:22:9B:3F:7F:66:D0:8C:AD:FC:3F:1F:6E: 6A:90:28:2D:ED:09:00:02:4A:61:A5:87:ED:2A:45:56: 7F:BC:EB:91:C2:56:9B:F9:4C:57:CC:5B:47:61:D9:29: 8A:71:5F:7E:85:17:C7:42:17:3B:87:DE:EE:29:02:92
Status: REOPENED → RESOLVED
Closed: 23 years ago23 years ago
Resolution: --- → WORKSFORME
I'd really like mrb to help confirm that this works now, if he has some time.
Verified per javi's evidence. mrb, reopen if v2 crls crash for you.
Status: RESOLVED → VERIFIED
Product: PSM → Core
Version: psm1.3 → 1.0 Branch
You need to log in before you can comment on or make changes to this bug.