1098026 - Cannot import certificate from smtp server/validate preference dialog broken

Status: UNCONFIRMED

(Thunderbird :: Security, defect)

Description

[Joachim Herb]

If I want to import a (self signed) certificate from a smtp server, the dialog stalls and the download button does not work. There seems to be now way to import the certificate

This works with Thunderbird 31.x (starting this older version seems to be the only way to import the certificate, with 33.0 beta it down not work)

Also the button for certificate validation preferences (in the advance preference dialog) does not do anything but blocks the preference dialog.

Comment 1

[Magnus Melin [:mkmelin]]

Do you mean importing through Preferences | Advanced | Certificats ?
Do you have a (public) test case?
Does it work with a nightly build?

Comment 2

[Joachim Herb]

By importing I mean the dialog appearing if you connect the first time to a server (either SMTP or IMAP) via SSL with a self signed certificate. This dialog is broken in Thunderbird 33.0 (beta). 

With 36.0a1 it seems to work: At least for the SMTP server. For the IMAP server the dialog also seems to be broken, but after press cancel it seems to work. Or more specific: If I press "confirm security exception" the dialog closes and reappears immediately. If I press get certificate, the confirm security exception dialog is greyed out and cancel seems to fix the problem?!?

Comment 3

[Wayne Mery (:wsmwk)]

(In reply to Joachim Herb from comment #2)
> By importing I mean the dialog appearing if you connect the first time to a
> server (either SMTP or IMAP) via SSL with a self signed certificate. This
> dialog is broken in Thunderbird 33.0 (beta). 
> 
> With 36.0a1 it seems to work: At least for the SMTP server. For the IMAP
> server the dialog also seems to be broken, but after press cancel it seems
> to work. Or more specific: If I press "confirm security exception" the
> dialog closes and reappears immediately. If I press get certificate, the
> confirm security exception dialog is greyed out and cancel seems to fix the
> problem?!?

still bad with 39.0a1 or 37.0b1?

Comment 4

[Joachim Herb]

I tested with 39.0a1 (build 20150316030200), 38.0a2 (20150316004001) and 37.0b1 (20150311003753). All show the same behavior:

(After deleting the certificates) if I connect to the server (IMAPS), the "Add Security Exception" dialog opens. Then if I press "Get Certificate" the "Confirm Security Exception" is greyed out. After pressing Cancel the "Add Security Exception" dialog appears again. The "Confirm Security Exception" button is pressable (again), and I can close the dialog with it. It does not appear again and the certificate list (Tools->Options->Advanced->Certificates->View Certificates) shows the certificate.

If I do not press the "Get Cerificate" button after the first appearance of the "Add Security Exception" dialog opens but instead "Confirm Security Exception" the dialog closes and appears again, then pressing the "Confirm Security Exception" button works and the dialog does not appear again. The certificate has been added to the certificate list.

For the SMTPS server the dialog works the first time, if the "Confirm Security Exception" is pressed. If the "Get Certificate" is pressed, the "Confirm Security Exception" button is greyed out again and I have to "Cancel" the dialog. Then I have to press send for the message again, the dialog appears again and if I press "Confirm Security Exception" it works as expected.