1623257 - Non specific error message when using self signed certificate to save draft

Status: RESOLVED DUPLICATE of bug 1623568

(Thunderbird :: Security, enhancement)

Description

[Marc Schläpfer]

Attachment: thunderbird-inconclusive-error.png

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:72.0) Gecko/20100101 Firefox/72.0

Steps to reproduce:

1. Import self signed certificate of receiver
2. Draft message to receiver
3. Attempt to save draft message

Actual results:

Thunderbird displays inconclusive error message.
Thunderbird cannot find certificate, although it is displayed in preferences -> certificates.

Expected results:

Draft is saved without error message or error message is conclusive.

e.g. "Draft could not be saved, because the certificate has invalid purposes"

Comment 1

[Ralf Hauser]

see also Bug 733518
As for the suggested text "... invalid purposes" -
a) be more specific and say which - e.g. <<X509v3 Key Usage:
Digital Signature, Key Encipherment, Data Encipherment
X509v3 Extended Key Usage:
E-mail Protection>> (as per https://hohnstaedt.de/xca i.e. https://github.com/chris2511/xca/)
b) allow to override this (as long as the public key has at least 2048 bytes length)

Comment 2

[Ralf Hauser]

see also Bug 1623568

Comment 3

[Ralf Hauser]

http://kb.mozillazine.org/Installing_an_SMIME_certificate see also Bug 1623560

Comment 4

[Wayne Mery (:wsmwk)]

duplicate?

Comment 5

[Magnus Melin [:mkmelin]]

Save draft and send is internally almost the same process. So this sound like the same as bug 1623568.

Comment 6

[Kai Engert [:KaiE:]]

We deliberately don't support self signed S/MIME certificates.
I suggest wontfix.