Clear Memory-Only Intermeditate Cert Store

The Intermediate Certificate store is not cleared by nsIDOMCrypto::logout() or our old ssl hack. We need to clear this, but we are probably blocked on this Firefox Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=435159 (fixed)

added component::applications/tor browser in Legacy / Trac gitlab-tb-torbutton in Legacy / Trac owner::tbb-team in Legacy / Trac priority::medium in Legacy / Trac severity::normal in Legacy / Trac status::new in Legacy / Trac tbb-newnym in Legacy / Trac tbb-torbutton in Legacy / Trac type::defect in Legacy / Trac labels

This should be part of legacy/trac#523 (closed) for TorBrowserButton. We should clear intermediate certs when the user requests a new identity.

Trac:
Component: Torbutton to TorBrowserButton

Trac:
Parent: legacy/trac#2482 (moved) to legacy/trac#2877 (moved)

This may require more browser work. Either the above firefox bug, or a more direct way into NSS initialization via legacy/trac#2949 (moved).

Trac:
Cc: N/A to g.koppen@jondos.de

Trac:
Cc: g.koppen@jondos.de to g.koppen@jondos.de, lunar@debian.org

Trac:
Milestone: N/A to TorBrowserBundle 2.2.x-stable

Trac:
Priority: major to normal

Trac:
Cc: g.koppen@jondos.de, lunar@debian.org to g.koppen@jondos.de, lunar@debian.org, StrangeCharm

Trac:
Milestone: TorBrowserBundle 2.2.x-stable to TorBrowserBundle 2.3.x-stable

This is a minor linkability issue.

Trac:
Keywords: N/A deleted, tbb-linkability added

Trac:
Keywords: N/A deleted, interview added

Trac:
Owner: mikeperry to tbb-team
Component: TorBrowserButton to Tor Browser
Keywords: N/A deleted, tbb-torbutton added

Trac:
Keywords: tbb-linkability deleted, tbb-newnym added
Sponsor: N/A to N/A
Cc: g.koppen@jondos.de, lunar@debian.org, StrangeCharm to gk, lunar@debian.org, StrangeCharm
Severity: N/A to Normal
Reviewer: N/A to N/A

Trac:
Cc: gk, lunar@debian.org, StrangeCharm to gk, lunar@debian.org

As Certificate Viewer in Page Info must request intermediate certificate again or show nothing, does it mean that Intermediate Certificate store becomes inaccessible for the second request shortly?

Trac:
Milestone: TorBrowserBundle 2.3.x-stable to N/A

Replying to mikeperry:

This may require more browser work. Either the above firefox bug, or a more direct way into NSS initialization via legacy/trac#2949 (moved). OMG, it's an ancient bug, where "Clear" means clearing Cert Store on disk. But, as gk recycled it for current needs, thus, renaming... FWIW, David Keeler resolved the above Firefox bug as a duplicate of his own https://bugzilla.mozilla.org/show_bug.cgi?id=1267861

Trac:
Summary: Clear Intermeditate Cert Store to Clear Memory-Only Intermeditate Cert Store

We should recheck whether that is still a New Identity issue.

Trac:
Keywords: interview deleted, N/A added

Trac:
Parent: legacy/trac#2877 (moved) to N/A

Add magic gitlab keyword.

Trac:
Keywords: N/A deleted, gitlab-tb-torbutton added

mentioned in issue legacy/trac#2949 (moved)

mentioned in issue legacy/trac#21559 (moved)

moved from legacy/trac#2739 (moved)

added Bug label and removed 1 deleted label

added New Identity label and removed 1 deleted label

added 1 deleted label

changed milestone to %Tor Browser: 11.0 Issues with previous release

added Backlog label

marked tor-browser#21559 as a duplicate of this issue

marked this issue as related to tor-browser#21559

mentioned in issue tor-browser#21559

See tor-browser#21559 (comment 2747212) for more details, and a possible starting point at the end.

added Security label and removed 1 deleted label

changed the description

let's track this in tor-browser#21559 as this sort of thing is hella outside the scope of torbutton these days

closed