374354 - Wrong message when certificate has expired

Status: RESOLVED DUPLICATE of bug 336599

(Thunderbird :: Security, defect)

Description

[Eddy Nigg (StartCom)]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.2) Gecko/20070220 Firefox/2.0.0.2
Build Identifier: version 2 beta 2 (20070116)

When a client certificate has expired and one reads messages the the certificate icon has a warning sign. Upon clicking on the icon a the "Message Security" window opens. The message within this window is: 

"Digital Signature Is Not Valid

This message includes a digital signature, but the signature is invalid.
The certificate used to sign the message was issued by a certificate authority
that you do not trust for issuing this kind of certificate."

However the message should state that the certificate expired as long as the issuing CA is a) still in the auth store, b) is not expired.


Reproducible: Always

Steps to Reproduce:
1. View a message which was signed by a now expired certificate
2. Click on the "certificate icon"
3. Read the message from the "Message Security" window
Actual Results:  
The message claims that the issuing CA is not trusted.

Expected Results:  
Should state that the certificate has expired.

Comment 1

[Eddy Nigg (StartCom)]

Attachment: Wrong message

Comment 2

[Eddy Nigg (StartCom)]

Attachment: Expired certificate example