1566121 - Multiple Certificate Importation

Status: UNCONFIRMED

(Thunderbird :: Security, enhancement)

Description

[kc]

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:67.0) Gecko/20100101 Firefox/67.0

Steps to reproduce:

Attempted to import 7000 encryption certificates in Ubuntu Linux Thunderbird.

Actual results:

Thunderbird wants to do this 1 at a time.

Expected results:

If possible, please add a feature to import multiple certificates (or a whole directory) with a single action.

Comment 1

[Kai Engert [:KaiE:]]

This seems to be a very unusual task for a user.

You probably try to do something that only an expert would do, do you agree?

For experts, it's possible to use NSS command line utilities to manage the certificate that is inside a Thunderbird profile.

You could look at the "certutil" utility, and you could write a script that calls certutil for every file you'd like to import, with the appropriate parameters.

Comment 2

[kc]

I would prefer to use the automated LDAP method to access and import encryption certificates from our Outlook oriented LDAP database but am unable to get this to work are much effort and time. I have been able to download the certificates and am importing them as I need them from the "Advanced"-> "Manage Certificates"->"People" tab-> "Import" button

I could do this en-mass if the import button would allow this. Also, other people in my company would also use this feature. Thank you for taking the time to comment on this!

Comment 3

[Kai Engert [:KaiE:]]

Are you able to tell us the use case for importing that many certificates into a thunderbird profile that is used on one computer?

Thunderbird is able to import certificates for S/MIME email correspondents on demand from an LDAP directory.

Comment 4

[kc]

sadly, LDAP does not import them from our directory. I have been able to download the certificates using a different program and have them in a local directory. At this point, I'd just like to import them into Thunderbird. It is a fallback position. LDAP use would be preferable but seems not possible.

Comment 5

[Magnus Melin [:mkmelin]]

What do you mean by importing from the LDAP directory? Do you mean accssing the cerficicates through the LDAP addressbook?

Comment 6

[Wayne Mery (:wsmwk)]

kc?

(In reply to Magnus Melin [:mkmelin] from comment #5)

What do you mean by importing from the LDAP directory? Do you mean accssing the cerficicates through the LDAP addressbook?