Chromium does not use NSS database for CAs or client certificates

Bug #632043 reported by Paul Natsuo Kishimoto
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
chromium-browser (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

Binary package hint: chromium-browser

Under Ubuntu 10.04, I was able to install a CA (http://ca.mit.edu/mitca.crt) and a client certificate ("me.p12") and use them, following the instructions at http://code.google.com/p/chromium/wiki/LinuxCertManagement . The commands were:
$ certutil -d sql:$HOME/.pki/nssdb -A -t "C,," -n MIT -i mitca.crt
$ pk12util -d sql:$HOME/.pki/nssdb -i me.p12

In Maverick, I am able to install the CA and certificate, but I can no longer use them to make secure connections. For example, in visiting https://web.mit.edu/consult/www/certificate/test.html I see an error message:
Error 107 (net::ERR_SSL_PROTOCOL_ERROR): SSL protocol error.

I notice that this error is the same *whether or not* the directory $HOME/.pki/nssdb exists. To me, this indicates that even when the keys are present in the database, Chromium is unable to access them properly.

$ lsb_release -rd && apt-cache policy chromium-browser
Description: Ubuntu maverick (development branch)
Release: 10.10
chromium-browser:
  Installed: 6.0.472.53~r57914-0ubuntu1
  Candidate: 6.0.472.53~r57914-0ubuntu1
  Version table:
 *** 6.0.472.53~r57914-0ubuntu1 0
        500 http://ubuntu.media.mit.edu/ubuntu/ maverick/universe i386 Packages
        100 /var/lib/dpkg/status

Revision history for this message
Paul Natsuo Kishimoto (khaeru) wrote :

This seems to have fixed itself; I'm not sure how.

Changed in chromium-browser (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.