129936 - attempt to send digitally signed mail fails and gives 'send failed' popup

Status: VERIFIED WORKSFORME

(MailNews Core :: Security: S/MIME, defect, P2)

Description

[Neal Ziring]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:0.9.8) Gecko/20020204
BuildID:    2002020406

In Mozilla 0.9.8/2002020406, sending digitally signed mail
messages does not seem to work.  I can select the certificate
okay, and set the option to digitally sign, but when I click Send
the message won't send.

Note: I have only tried this with a certificate based on a 2048-bit
RSA key.  However, the same exact key and certificate worked for
digitally signing a message in Netscape 4.78.

Reproducible: Always
Steps to Reproduce:
    1. Obtain a new Verisign certificate, or import a key/certificate
    2. Select the certificate in the Mail account Security tab for
       default mail account settings
    3. Check the box 'Digitally sign message' in Security tab
    4. Pop down Mail and news account settings
    5. Either stay in Mozilla or restart it, doesn't seem to matter
    6. In Mail/News, select Compose to begin a new message
    7. Check that Options->Security->Digitally Sign is checked, it is
    8. Write stuff in the message and click Send
    9. Dialog pops up with the following message:
       "Sending of message failed"


Actual Results:  Mail did not send, got dialog.  Full text in dialog box:
       "Sending of message failed"
        You requested to sign this message, but the application failed
        to find an encryption cert to include in the signed message or
        the certificate has expired."

Expected Results:  Expected that S/MIME digitally signed message would
be sent to addressee.

Comment 1

[Neal Ziring]

I think that this bug might be a duplicate for
#127364, but they seem slightly different.
Sorry for any problems my redundant submission
causes.

Comment 2

[Mitchell Stoltz (not reading bugmail)]

->PSM

Comment 3

[Stephane Saux]

You must configure both the signing and encryption prefs in mail/news account
prefs security.

Comment 4

[Neal Ziring]

Okay, using ssaux's suggestion I got this to
work.  Still, it was confusing.  Perhaps the
default value for the encrypting cert should
be "Use signing cert" rather than "none"?

Comment 5

[John Unruh]

Verified.