125463 - signing mails with a smartcard

Status: VERIFIED WORKSFORME

(MailNews Core :: Security: S/MIME, defect, P3)

Description

[Angel L. Mateo]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.8) Gecko/20020204
BuildID:    2002020415

I want to sign mail messages with a smartcard. I have a PKCS11 module that works
under Netscape Communicator 4.x. I can see that mozilla reads the certificate,
but it can't sign the messages.

Reproducible: Always
Steps to Reproduce:
I have a PKCS11 module to sign mails from a certificate from a smartcard. I now
want to use it that module with mozilla, but I can't.
I have installed the CA certificate in mozilla. I have added the security device
(this works) and I have selected the certificate to sign mails. I can see that
the certificate can be readed from the smartcard, because it appears in "Your
Certificates". But when I am going to send a signed message I have the error:

Sending of message failed
You requested to sign this message, but the applicationm failed to
find an encryption cert to include in the signed message or the certificate has
expired.

But the certificate expires on 01/01/06.

If I select the same certificate to encrypt messages, then I have:

Sending of message failed.
Please verify that your Mail & Newsgroup account settings are correct and try again.

If I extract the certificate to a file and then import it, it works. But I need
to read it from a smartcard.
1.
2.
3.

Comment 1

[John Unruh]

PSM:S/MIME. Reporter, under Edit>Mail/News prefs>Security, make sure that you 
have both a signing and encrypting cert chosen, even if you do not encrypt 
messages. Also, under Edit>Prefs>Privacy>Certs>Manage Certs>Authorities tab, 
find the Certificate Authority that issued the email cert and edit it to make 
sure that it is trusted.

Comment 2

[Angel L. Mateo]

I had already done all the comments about the encryption cert adn the
certificate. And it doesn't work.

Comment 3

[Stephane Saux]

works for me with ActivCard, IButtons.

I suspect a misconfiguration error.

Comment 4

[Charles Rosendahl]

I cannot reproduce this using the ActivCards that I have on the 20020506 trunk
builds.

Resolving as works for me.  All I can suggest is that if the reporter still has
the problem, try to log into the reader first (device manager) and then attempt
to send the message.  Let me know if this works.

Comment 5

[Charles Rosendahl]

.