Ability to delete non-built-in certs

[WilsonKathleen]

I think there should be a way to delete a non-built-in cert (a.k.a. customCert).

Example:

• Browse to: https://helloworld.letsencrypt.org/
• In Cert Manager Add-on click on "Digital Signature Trust Co." the View Certificates for that CA.
• You will see that an intermediate cert named "Let's Encrypt Authority X1" has been imported. Since it is an intermediate certificate, all trust bits are off -- needs the root cert's trust bit settings to say if it is trusted or not.

It would be great to have a way to delete a customCert such as this.

[cheungnj]

If a customCert is imported with our extension and then the extension is uninstalled / disabled, should the customCert still be imported?

[WilsonKathleen]

No. If I disable a customCert that I imported (not builtin), it can be deleted -- it does not need to be shown as still imported.

[WilsonKathleen]

Oh! sorry, just realized the question was about uninstalling the add-on... I think that's a separate issue -- #27.

[cheungnj]

@mozkeeler When a custom cert is imported, it can successfully be deleted using the default Firefox cert manager and then this is reflected in our add-on. When trying to delete the cert using our add-on, the cert still appears in the default cert manager and our add-on. Would you happen to know why custom certs would not be deleted when calling deleteCertificate() on the nsIX509CertDB? The custom certificate is passed to the method and it is a nsIX509 cert.

[mozkeeler]

This may be a result of https://bugzilla.mozilla.org/show_bug.cgi?id=454782 (see also https://bugzilla.mozilla.org/show_bug.cgi?id=1267861 and https://bugzilla.mozilla.org/show_bug.cgi?id=435159 ). Does the certificate reappear even after restarting Firefox?

[cheungnj]

I just tested this with the new XPI and the certificate is deleted from both the old and new cert managers after deleteCertificate is called from the new cert manager and Firefox is restarted. https://bugzilla.mozilla.org/show_bug.cgi?id=1267861 appears to be the issue since the cert appears to only be lazily marked for deletion and not immediately deleted.