383634 - "security certificate" dialog hijacks focus while finding an attachment

Status: UNCONFIRMED

(Thunderbird :: Message Compose Window, defect)

Description

[schwern]

User-Agent:       Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.4) Gecko/20070515 Firefox/2.0.0.4
Build Identifier: version 1.5.0.12 (20070509)

While adding an attachment to a message I was composing, I used Cmd-Shift-G to go to a specific folder.  This brings up a dialog box I can type the folder path into.  Just as that was happening the Get Mail "security certificate presented belongs to..." pop-down appeared on my Inbox.  Neither the "Go To Folder" or security certificate buttons would work, though the "Go To Folder" buttons visually acknowledged they were being pressed and I was able to type in the folder path dialog.

Reproducible: Always

Steps to Reproduce:
* Set up your inbox to pull from a site with a security certificate signed by a different host.  Using an SSH tunnel through localhost works.
* Set the inbox to automatically get mail often, say once a minute.
* Compose a new message
* Click "Attach"
* Cmd-Shift-G in the "Attach File(s)" dialog to bring up "Go To Folder"
* Wait for your inbox to try and get mail and bring up the security certificate popdown.
Actual Results:  
Once the "security certificate" popdown comes up you will not be able to close either the "Go To Folder" or "security certificate" dialogs.  Quitting Thunderbird leaves the compose window open, it has to be force quit.

Expected Results:  
The "Go To Folder" and "security certificate" dialogs should be responsive.  Quitting Thunderbird should close the compose window normally.

A screenshot can be had here.  http://schwern.org/~schwern/tmp/attaching_bug.tiff

Comment 1

[schwern]

This problem also occurs on version 2.0.0.0 (20070326)

Comment 2

[schwern]

This problem persists in Thunderbird 3 Beta 3.

I can now close the "Go to folder" dialog, that is the only improvement.

The "Attach File(s)" dialog can be navigated but the "Cancel" and "Open" buttons are unresponsive.  They indicate they have been clicked but to no result.  The "invalid security certificate" dialog can not be clicked on (I get a system alert beep).  I cannot quit Thunderbird, the option is greyed out in the Thunderbird menu.  I had to force quit.

I've attached a new screenshot.

Comment 3

[schwern]

Attachment: Screenshot of the bug in action in Thunderbird 3 beta 3

Comment 4

[Wayne Mery (:wsmwk)]

schwern, interesting issue. Does it also happen with version 24 or 31?

Comment 5

[schwern]

The problem remains in both version 24.6.0 and 31.0.

To make the problem easier to reproduce, here is how you can set up an ssh tunnel to test it.
ssh -f -L 12993:your.mail.server:993 some.ssh.host.you.can.log.into -N
Then configure your account settings to use localhost port 12993.

In addition, when I do cancel the security exception dialog it immediately comes back.  I have to cancel it several times.  In 24.6.0 it's four or five times before it will go away for good.  31.0 only takes two cancels.