[tor-bugs] #14902 [Tor Browser]: Linux TBB 4.0.3 Firefox missing CA certificates

[Tor Bug Tracker & Wiki]

#14902: Linux TBB 4.0.3 Firefox missing CA certificates
-----------------------------+----------------------
     Reporter:  starlight    |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+----------------------

Comment (by gk):

 Replying to [ticket:14902 starlight]:
 > The example causing me to notice is
 >
 >    CN = VeriSign Class 3 International Server CA - G3
 >
 > which is present in standard Firefox 36.

 Hm... VeriSign Class 3 International Server CA - G3 is not listed in the
 Authorities tab for me. You might have imported that one yourself?

 > On a glance I see something like five missing
 > VeriSign CA certs in the certificate viewer
 > under the "Authorities" tab.

 Well, comparing the ESR 31 based Tor Browser to Firefox 36 does not work
 as there might be (and are in this case) new authorities that got added to
 newer Firefox versions but not backported to ESR. That said we seem to
 miss all the Authorities labeled as "Software Security Device" which is
 indeed a bug.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/14902#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online