136781 - Deletion of cert configured for signing/encryption leaves mail settings invalid

Status: VERIFIED INVALID

(MailNews Core :: Security: S/MIME, defect, P2)

Description

[Charles Rosendahl]

If the user deletes the certificate(s) that are currently configured to be used
as the signing, encryption, or both in the mail client, the mail client settings
are not reset are in an invalid state.

If the user sends a signed message to himself, it sends the message unsigned
without error.

Comment 1

[Charles Rosendahl]

Raised priority/severity, added block on Bug 137197.

Recommend for beta release.

Comment 2

[Julien Pierre]

I think that's a pretty serious issue. Especially since there is not even a way 
in the UI to remove the signing or encryption certificate. Clicking the mail 
account / security / certificate "select" button gives no feedback but leaves 
the delete certificate's nickname in place. I think this is a case that warrants 
going to the DB when opening the settings panel to check if the configured certs 
still exist, and display a pop-up to the user if not.

Comment 3

[Kai Engert [:KaiE:]]

> I think this is a case that warrants 
> going to the DB when opening the settings panel to check if the configured certs 
> still exist, and display a pop-up to the user if not.

My only concern is, if the user is not yet logged in, and the cert is on a
hardware device:

- when trying to query the database, would we suddenly query the user to log in?
Would the user expect to do that just for looking at preferences?

- if the cert is on a hardware device that is currently not inserted, would we
fail to find the cert, tell him the cert can not be found, and report a failure?

Comment 4

[Stephane Saux]

Because of smart cards, I suggest we do not fix this until we have a way to
figure out whether the certs in the prefs are stored on a hardware device.  It's
possible since the cert is stored with the device name pre-pended to it when
it's on a card.

This is a minor problem.

Comment 5

[Charles Rosendahl]

Now there are ways to reselect and clear the settings, so this bug is no longer
valid.

Comment 6

[Charles Rosendahl]

Verified