199629 - Crash signing email with certificate from untrusted authority

Status: RESOLVED WORKSFORME

(MailNews Core :: Security: S/MIME, defect)

Description

[Ole Dalgaard]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3) Gecko/20030312
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3) Gecko/20030312

In "Certificate Manager" I have a certificate under "Your Certificates" which
under purposes says "<Issuer Not Trusted>".
If I try to sign an email using this certificate, mozilla crash.

If I edit the issuer in "Authorities" and mark "This certificate can identify
web sites" and "This certificate can identify mail users" and "This certificate
can identify software makers", I can sign emails successfully.

Reproducible: Always

Steps to Reproduce:
1. Untrust your certificate issuer (I have a non Builtin. It is called "Software
Security Device)
2. Send a signed email using a certificate from your untrusted issuer.


Actual Results:  
Crash

Expected Results:  
Send a signed email

Comment 1

[Nelson Bolyard (seldom reads bugmail)]

Reporter: Is this still reproducible with recent mozilla builds?

Comment 2

[Ole Dalgaard]

I have tested this again with Mozilla 1.5 and Thunderbird 0.4

Both displays nice error messages explaining what needs to be done to send
signed messages.

Comment 3

[John G. Myers]

Closing WORKSFORME per reporter's latest comment.