1305363 - thunderbird cannot download mail over SSL/TLS

Status: RESOLVED INVALID

(Thunderbird :: Untriaged, defect)

Description

[lorenzo]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Build ID: 20160921204512

Steps to reproduce:

Tried to get new mail. Thunderbird was updated last night to 45.2.0 on Fedora 23 (Qubes template).


Actual results:

Status bar stuck at "Connected to <mailserver>...". Error console shows:

Timestamp: 09/26/2016 09:02:29 AMError: An error occurred during a connection to xxxx.A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot.Error code: <a id="errorCode" title="SEC_ERROR_PKCS11_DEVICE_ERROR">SEC_ERROR_PKCS11_DEVICE_ERROR</a>

No mail is downloaded.


Expected results:

Thunderbird should have been able to download e-mail.

Comment 1

[Jorg K (CEST = GMT+2)]

Of course TB can download e-mail using SSL/TLS ;-)

I believe the security requirements have been tightened as we had other people reporting similar problems, see for example bug 1274175 and bug 1276868 comment #3.

Test your mail server here: https://www.htbridge.com/ssl/ and report back the results.

There are some tweaks to preferences to force TB to lower its security requirements.

Comment 2

[lorenzo]

Interestingly 45.2.0 on Debian does not suffer from this issue; therefore the problem is likely not related to the mail server. At most it might be either Fedora doing some extra enforcing of the SSL connection, or Debian relaxing it. I'll report it to those vendors and see if it helps.

I think that if nobody else reports this you can safely close it.

Thanks,

Comment 3

[Jorg K (CEST = GMT+2)]

Maybe TB or Mozilla core tightened the screws from 45.2 to 45.3.

We'll close the bug when you report your solution here. BTW, checking out the server through https://www.htbridge.com/ssl/ and then comparing this with the requirements could help.

Also: You could read up on the security.tls.version.* preferences and tweak those, see bug 1274175 comment #5.

Comment 4

[lorenzo]

I've switched back to Fedora - Thunderbird is still 45.2.0 but no sign of the bug. E-mail checking started working again. I'm afraid I can't reproduce it any more. The only recently updated package in the system was OpenSSL so I wonder if it's related to that and I'm just chasing a wild goose here.

Either way, thanks for the help!


ps: I've run a check of the mail server - that was useful.