Error Importing Crl To Local Database
BMO. For more details see Persona Deprecated. Last Comment Bug530356 - NSS cannot use a base64-encoded CRL. Summary: NSS cannot use a base64-encoded CRL. Status: NEW Whiteboard: Keywords: Product: NSS Classification: Components Component: Libraries (show other bugs) Version: unspecified Platform: All All Importance: -- normal (vote) TargetMilestone: --- Assigned To: nobody QA Contact: TriageOwner: Mentors: URL: http://www.rsasecurity.com/products/k... Depends on: Blocks: Show dependency tree /graph Reported: 2009-11-21 19:16 PST by Wan-Teh Chang Modified: 2014-06-29 17:39 PDT (History) CC List: 2 users (show) ismail roland See Also: Crash Signature: (edit) QA Whiteboard: Iteration: --- Points: --- Tracking Flags: Attachments Add an attachment (proposed patch, testcase, etc.) Description Wan-Teh Chang 2009-11-21 19:16:10 PST Some CRLs are published in base64-encoded form. An example is http://www.rsasecurity.com/products/keon/repository/certificate_status/RSA_Public_Root_CA.crl -----BEGIN X509 CRL----- MIIB9jCCAV8CAQEwDQYJKoZIhvcNAQEFBQAwbDEaMBgGA1UEChMRUlNBIFNlY3Vy aXR5IEluYy4xHjAcBgNVBAMTFVJTQSBQdWJsaWMgUm9vdCBDQSB2MTEuMCwGCSqG SIb3DQEJARYfcnNha2VvbnJvb3RzaWduQHJzYXNlY3VyaXR5LmNvbRcNMDkxMTAy MTQzNDIxWhcNMTAwNTAxMTQzNDIxWjCBjDBKAhEArDqoh9FHJHXT7OPguun4+BcN MDkxMTAyMTQyNzA5WjAmMAoGA1UdFQQDCgEJMBgGA1UdGAQRGA8yMDA5MTEwMjE0 MjQ1NVowPgIRALGznZ095PB5aAOLPg57fMMXDTAyMTAyMzE0NTAxNFowGjAYBgNV HRgEERgPMjAwMjEwMjMxNDUwMTRaoDAwLjAfBgNVHSMEGDAWgBT1TDF6UQM/LNeL l5lvqHGQq3g9mzALBgNVHRQEBAICAIEwDQYJKoZIhvcNAQEFBQADgYEAEBMZTMCA 8zoSXIsg+NTFd4+fc4Xyq1gprV88s1FULwCiStUzli+phvAZr12QRZBCqoPSxY6p JRllYBAVg6BW1jVt08nboQbccSiacbl1MqMdoOlmkDQoTSp3ET1pbgm3uEK8hSGM ke9aKa878yZQj8gQpC8H2oUBA11ILRn26xg= -----END X509 CRL----- If I type that URL in the location bar of Firefox and hit Enter, I get an Alert dialog: The application cannot import the Certificate Revocation List (CRL). Error Importing CRL to local Database. Error Code:ffffe009 Please ask your system administrator for assistance. Error code 0xffffe009 is -8183 (SEC_ERROR_BAD_DER). Note: PSM should print that error code as a signed decimal integer for easier error code lookup. This is because NSS passes the downloaded CRL to CERT_DecodeDERCrlWithFlags directly, without checking if the CRL needs base64 decoding first. Comment 1 Nelson Bolyard (seldom reads bugmail) 2009-11-21 20:15:23 PST This is an RFC conformance issue. See RFC 5280 page 46. If the DistributionPointName contains a general name of type URI, the following semantics MUST be assumed: [...] When the HTTP or FTP URI scheme is used, the URI MUST point to a single DER encoded CRL as specified in [RFC2585]. HTTP server
BMO. For more details see Persona Deprecated. Last Comment Bug261003 - Does not import CRL (Error Code: ffffe00b) Summary: Does not import CRL (Error Code: ffffe00b) Status: RESOLVED INVALID Whiteboard: Keywords: Product: Core Classification: Components Component: Security: PSM (show other bugs) Version: Trunk Platform: x86 Windows 2000 Importance: -- major (vote) TargetMilestone: --- Assigned To: Kai Engert (:kaie) QA Contact: TriageOwner: David Keeler [:keeler] (use needinfo?) Mentors: URL: Depends on: Blocks: 107491 Show dependency tree /graph Reported: 2004-09-22 09:16 PDT by Attila https://bugzilla.mozilla.org/show_bug.cgi?id=530356 Bognar Modified: 2008-07-04 15:55 PDT (History) CC List: 3 users (show) gavin.sharp joshbirnbaum-mozil pip See Also: Crash Signature: (edit) QA Whiteboard: Iteration: --- Points: --- Has Regression Range: --- Has STR: --- Tracking Flags: Attachments Add an attachment (proposed patch, testcase, etc.) Description Attila Bognar 2004-09-22 09:16:21 PDT User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; rv:1.7.3) Gecko/20040913 Firefox/0.10 Build Identifier: Mozilla/5.0 (Windows; U; https://bugzilla.mozilla.org/show_bug.cgi?id=261003 Windows NT 5.0; rv:1.7.3) Gecko/20040913 Firefox/0.10 Firefox does not import a CRL that mozilla imports without any problem. The message displayed: The browser cannot import the Certification Revocation List (CRL). Error importing CRL to local Database. Error Code:ffffe00b. Please ask your system administrator for assistance. Reproducible: Always Steps to Reproduce: 1. create a CRL with openssl 2. publish it on a website 3. try to download it Actual Results: a message dialog popped up: The browser cannot import the Certification Revocation List (CRL). Error importing CRL to local Database. Error Code:ffffe00b. Please ask your system administrator for assistance. Expected Results: Import the CRL in the CRL list like mozilla, appear in the list of CRLs imported. Mozilla imported it with no problem. Comment 1 Josh Birnbaum 2004-11-23 21:34:04 PST Attila, which version of Mozilla is working? Both use the same code for crypto. Comment 2 Jean-Marc Desperrier 2005-03-10 08:39:44 PST 'ffffe00b' is the unsigned int represention of the 16 bit '-1FF5' signed integer value. In decimal encoding, that's -8 181. Once you caculated that you can go to this page : NSS and SSL Error Codes htt
HCL Search Reviews Search ISOs Go to Page... LinuxQuestions.org > Forums > Linux Forums > Linux - Software problem when importing CRL into http://www.linuxquestions.org/questions/linux-software-2/problem-when-importing-crl-into-firefox-648554/ Firefox User Name Remember Me? Password Linux - Software This forum is for Software issues. Having a problem installing a new program? Want to know which application is best http://osdir.com/ml/mozilla.security/2004-02/msg00026.html for the job? Post your question in this forum. Notices Welcome to LinuxQuestions.org, a friendly and active Linux Community. You are currently viewing LQ as a guest. By joining error importing our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today! Note that registered members see fewer ads, and ContentLink is completely disabled once you log in. Are you new to error importing crl LinuxQuestions.org? Visit the following links: Site Howto | Site FAQ | Sitemap | Register Now If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here. Having a problem logging in? Please visit this page to clear all LQ-related cookies. Introduction to Linux - A Hands on Guide This guide was created as an overview of the Linux Operating System, geared toward new users as an exploration tour and getting started guide, with exercises at the end of each chapter. For more advanced trainees it can be a desktop reference, and a collection of the base knowledge needed to proceed with system and network administration. This book contains many real life examples derived from the author's experience as a Linux system and network administrator, trainer and consultant. They hope these examples will help you to get a better understanding of the Linux system and that you feel encouraged to try out things on your own. Click H
from IDEALX. Once I have created a CRL,I am trying to import thisone in Mozilla (by browsing the URL of the crl-file), but I get the following error: "The browser cannot import the Certificate Revocation List(CRL) Error importing CRL to local database. Error ffffe000" That's error -8192, SEC_ERROR_IO, "An I/O error occured during the operation". Unfortunately, the PSM code that displays this message does 6 major steps, and if any error occurs in any of those steps, it goes to common error dialog which doesn't tell us which of the 6 operations failed. :( Inadequate error messages is an ongoing PSM problem. I tried to import the same CRL in Microsoft Internet Explorer, everything works fine. I also tried to import a CRL from Verisign in Mozilla, which also works, So the problem must be in my CRL Is this a "delta" CRL? NSS supports only "complete" CRLs, and not Delta CRLs, but I would have expected a different error in that case. What can be the exact reason for this error? If you can post here the URLs for the CA cert and CRL, or email those to me (as a zip file), I can take a look. Note: follow ups directed to netscape.public.mozilla.crypto Nelson B Thread at a glance: Previous Message by Date: Re: ct5.hypercount.com I think not! try this program to remove any spy software: http://beam.to/spybotsd greets paede JV wrote: I've noted traffic between my Mozilla installation and ct5.hypercount.com. Is this normal tracking or a problem? _______________________________________________ Mozilla-security mailing list Mozilla-security@xxxxxxxxxxx http://mail.mozilla.org/listinfo/mozilla-security Next Message by Date: Re: pkcs11 and pkcs7 to sign a document Welington B. Souza wrote: I am working in a project, and it need to use digital certification. Using the library opensc-pkcs11.dll I obtained to read the certificates, to sign and to verify the signature using pkcs11. However é necessary to sign using pkcs7, but searching the data of the digital certificate in the token (smart card). I tried several times without success to generate an envelope pkcs7 with OpenSSL using smart card to sign :( I tried to use the NSS, but I it do not compile with my compiler. I am using Borland C++ Builder. I have a good skill of Java techologies and a litle of C++. It would like a small example that made this, using a DLL. If somebody will be able to help would be very been thankful me. Do you have a PKCS 11 software module for your token? If so, and if your cert and key are prop