420419 - unable to import certificate (public key) in order to encrypt message

Status: RESOLVED INVALID

(Thunderbird :: General, defect)

Description

[Sebastien MAYER]

User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 1.1.4322)
Build Identifier: 2.0.0.12

I generated all kind of possible public key (PEM, DER, Base64, P7B) and i wanted to import that key into the 'autres personnes' (other people ?) certificates.
I select one of this files. No effect. The certificate does not appear into the list.
No error message, just nothing happens after selecting a certificate file.

Reproducible: Always

Steps to Reproduce:
(generate a p12 file. This file works. I can sign mails)
openssl pkcs12 -passin "pass:ThePass" -nokeys -clcerts -in guy@domain-cert.p12 -out [e-mail]
I send this file to another guy. That guy can do noting with the file.
I tried to import the p12 into IE, then export in the 3 formats offered: DER, Base64 and P7B. Same result.

Actual Results:  
Notihing imported.

Expected Results:  
To see the certificate in the 'other people' list, then be able to send encrypted mail to that guy.

Openssl is used on a debian etch machine, and is commonly used for TLS, ssh, https with no problem.
Using p12 files with thunderbird is OK for signing mails.

Additionnal question : can i import certificates from the command line ?
I have a database of certificates for all people in a company. Imagine 100 people. I want to import the 100 public keys automatically.
Imagine 100 people needing to import each 99 certificates ! A nightmare !

Comment 1

[Sebastien MAYER]

******************************************
I probably found the solution.
In the openssl.conf, in the [user_cert] section, i addes dataEncipherment to the KeyUsage line :
keyUsage = nonRepudiation, digitalSignature, keyEncipherment,dataEncipherment

Yessssssssss..........

Comment 2

[Magnus Melin [:mkmelin]]

->INVALID (FIXED is only used when known code changes resolved the issue)
https://bugzilla.mozilla.org/page.cgi?id=fields.html#resolution