1164363 - Can't install new add-ons or updates of add-ons in Thunderbird 38.0b4

Status: RESOLVED WORKSFORME

(Toolkit :: Add-ons Manager, defect)

Description

[Onno Ekker [:nONoNonO UTC+1]]

My Thunderbird 38.0b4 shows there are updates, but I cannot install them. Whenever I try to update an add-on I get an error message saying there was an error downloading the add-on. This also happens when I try to install a new add-on. The following lines are in my error console for each add-on that fails to download:

1431504548078	addons.xpi	DEBUG	Download started for https://addons.cdn.mozilla.net/user-media/addons/54035/thunderbird_conversations-2.9.0-tb.xpi?filehash=sha256%3A7b6752b1c8da86f6390477deb00027ed4f2165fd14a6313aaaa80025c6d14990 to file C:\Users\OEEkker.AMC\AppData\Local\Temp\tmp-1ue.xpi

1431504548079	addons.xpi	DEBUG	Download of https://addons.cdn.mozilla.net/user-media/addons/54035/thunderbird_conversations-2.9.0-tb.xpi?filehash=sha256%3A7b6752b1c8da86f6390477deb00027ed4f2165fd14a6313aaaa80025c6d14990 completed.

1431504548079	addons.xpi	WARN	Download of https://addons.cdn.mozilla.net/user-media/addons/54035/thunderbird_conversations-2.9.0-tb.xpi?filehash=sha256%3A7b6752b1c8da86f6390477deb00027ed4f2165fd14a6313aaaa80025c6d14990 failed: 2153390068

1431504548081	addons.xpi	DEBUG	downloadFailed: removing temp file for https://addons.cdn.mozilla.net/user-media/addons/54035/thunderbird_conversations-2.9.0-tb.xpi?filehash=sha256%3A7b6752b1c8da86f6390477deb00027ed4f2165fd14a6313aaaa80025c6d14990

1431504548081	addons.xpi	DEBUG	removeTemporaryFile: https://addons.cdn.mozilla.net/user-media/addons/54035/thunderbird_conversations-2.9.0-tb.xpi?filehash=sha256%3A7b6752b1c8da86f6390477deb00027ed4f2165fd14a6313aaaa80025c6d14990 removing temp file C:\Users\OEEkker.AMC\AppData\Local\Temp\tmp-1ue.xpi

Comment 1

[Dave Townsend [:mossop]]

The error code in that log is SEC_ERROR_REVOKED_CERTIFICATE. This could mean the CDN has a bad certificate, sometimes this happens due to misconfiguration and usually clears up quickly. Are you still seeing this problem?

Comment 2

[Onno Ekker [:nONoNonO UTC+1]]

I still get the same error, I think for over a week now, even after restarting Thunderbird and rebooting Windows. I've switched to Thunderbird Release and that worked, switched back to Thundrebird Beta and it failed again. Probably related to bug 1164359, where I get the same error (but then in a human readable form) on Thunderbird's mail start page.

Comment 3

[Dave Townsend [:mossop]]

Sounds like beta is having some certificate verification problems in general so likely many SSL features won't work. Do you use the same profile for Beta and Release?

In beta go to Options, Advanced, Certificates, View Certificates, Servees, Add Exception

Now enter https://addons.cdn.mozilla.net in the location field and click Get Certificate. Once it has got it click the View button and put a screenshot of the resulting dialog in here.

Comment 4

[Onno Ekker [:nONoNonO UTC+1]]

I use same profile for release, beta and aurora... I get an error when I click Get Certificate:
No information available
Unable to obtain identification status for this site.

Comment 5

[Onno Ekker [:nONoNonO UTC+1]]

This is the error message from the error console when clicking the get Certificate button:
Timestamp: 15-5-2015 8:15:38
Error: Attempted to connect to a site with a bad certificate in the add exception dialog. This results in a (mostly harmless) exception being thrown. Logged for information purposes only: [Exception... "Failure"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: chrome://pippki/content/exceptionDialog.js :: checkCert :: line 109"  data: no]
Source File: chrome://pippki/content/exceptionDialog.js
Line: 115

Comment 6

[Onno Ekker [:nONoNonO UTC+1]]

Attachment: CA Certficate Trust Settings

When I checked the certificate with Thunderbird release, I noticed it was issued by DigiCert High Assurance CA-3. When checking that certificate's trust, I noticed that all settings were unchecked. After enabling the CA certificate for identifying websites, I could install updates again and the start page started working again too (bug 1164359).

I have no idea why the trust settings have changed or why it worked with Thunderbird Release with the smae profile without changing the trust settings...

Comment 7

[Onno Ekker [:nONoNonO UTC+1]]

Small correction: for the start page to work I had to enable trust settings for DigiCert High Assurance EV CA-1.