45935 - Mac on Migrated Certificate only: IMAP SSL/Secure/Certificate problem

Status: VERIFIED FIXED

(MailNews Core :: Networking: IMAP, defect, P2)

Description

[Karen Huang]

Used 07-19-12-M17 Mac commercial build:

Secure Connection (SSL) problem for IMAP & NNTP.

Currently, SSL is working on Linux & Windows.
And it seemed that bug 19119 already fixed, but I am still getting Secure 
Connection (SSL) problem for IMAP & NNTP for Mac only.

IMAP:
1) Setup a IMAP mail account with digital certificate setup & SSL connection 
from 4.x.
2) Migreted this IMAP account to Seamonkey.
3) Tried to login to this IMAP mail account
4) Actual Results: Got a "New Web Site Certificate: Step1" messages dialog.

Expected Results: Should display a Personal Security Password dialog 
describing "Please enter the Personal Security Password for the PSM Private Keys 
security device" which is same as Linux & Windows platforms.

NNTP:
1) Setup a profile with a Secure News/newsgroup with SSL connection (port:563) 
from 4.x (news://secnews/netscape.champions)
2) Migreted this profile to Seamonkey.
3) Tried to access this Secure News/Newsgroup
4) Actual Results: Got an Alert: "unknow error" even I did change the port to 
563 manually for migrated secure news (another bug 45922 problem)

Expected results: Should access secnews news/newsgroups successfully.

Comment 1

[Karen Huang]

Adding pp since problem is ONLY occurring on Mac platform.

Comment 2

[lchiang]

nominate nsbeta3.  cc: junruh - John, do you see these results as well?  Want to 
make sure we are set up ok on the Mac. The Mac Cartman bug was verified fixed.

Comment 3

[Karen Huang]

I try again on today's 07-20-08-M17 Mac build

Problem is still occurring on IMAP, but for the secure news, if after I select 
next for evey Web site certificate dialogs, it will went through and finally 
will prompt the passowd dialog for input the user id & password for the secure 
news. Updating the summary to only addree this problem on IMAP.
And after talked to John, there was depend bug 45900 need to be fixed in order 
to test this bug. So adding a dependence 45900 on this bug!!

Comment 4

[Scott MacGregor]

hmm can we really get away without having SSL support for imap and news on the
Mac? I'm not sure I agree that this can be a minus.

Comment 5

[Karen Huang]

This bug actually should be blocked by bug 46096 & bug 46652.
Changing the dependence bug from 45900 to bug 46096 & bug 46652.

After confirmed with John, the Secure Connction (SSL) is actually connecting, but 
the IMAP mail certificate part is just blocked by bug 46096 & bug 46652.

Updating the summary to specify this is Security certificate problem.
Adding the dependence bugs here, so will remind me for verifying this bug after 
those dependence bugs fixed.

Comment 6

[John Unruh]

The blocker bugs are fixed. Can this be retested?

Comment 7

[Karen Huang]

Sure. Will do that!!

Comment 8

[Karen Huang]

Used 08-25-04-M18 Mac commercial build:
Problem is still there, on Mac, Seamonkey should display a Personal Security 
Password dialog describing "Please enter the Personal Security Password for the 
PSM Private Keys security device", but it displays the other dialog : 
"No Acceptable Identification" dialog, I have certificate imported in my 4.7 and 
migrated to 6.0, but I still got this "No Acceptable Identification" dialog 
instead of a Personal Security Password dialog. Problem is not occurring on 
Windows & Linux platforms but only occurring on Mac platform, John, do you know 
the other bug may block this bug still?

Comment 9

[Karen Huang]

*** Bug 52684 has been marked as a duplicate of this bug. ***

Comment 10

[John Unruh]

Possibly the SSL/IMAP preference is being ignored. Is there a way to know if 
this is happening?

Comment 11

[Karen Huang]

It seems that this bug has been ignored for a while.
Raising the priority from P3 to P2.
Removing Target Milestone since nsbeta3 M18 is gone.
Let developer to decide the milestone... Ccing Esther. 

Comment 12

[Karen Huang]

Update the current 10-16-09-MN6 build status:

It should display a Personal Security Password dialog (same as other platforms) 
describing "Please enter the Personal Security Password for the PSM Private Keys 
security device".
And it used to display "No Acceptable Identification" dialog which is this bug 
logged for. But, from current build it didn't display anything at all - sounds 
like SSL/IMAP preference is being ignored.....

Comment 13

[John Unruh]

The "No Acceptable Identification" dialog is no longer a feature of PSM. That is 
why it is difficult to tell if SSL/IMAP is actually being used.

Comment 14

[lchiang]

I'm wondering if the IMAP protocol log can tell you if IMAP SSL is being used.
See: http://www.mozilla.org/quality/mailnews/mail-troubleshoot.html#imap

Comment 15

[Karen Huang]

Attachment: Attach IMAP log for tracking SSL on Mac platform

Comment 16

[John Unruh]

Attachment: Attaching a logfile after selecting SSL in prefs

Comment 17

[John Unruh]

Attached is the logfile, but I can't see any evidencs that SSL/IMAP was being 
used. Can someone else take a look at it?

Comment 18

[Karen Huang]

Attachment: Attach IMAP log with SSL from Windows platform

Comment 19

[Scott MacGregor]

Neither of the imap logs for the mac attached in this bug report are using SSL.
You can tell because we don't see a "PREAUTH" phrase in the initial server
greeting and then later on you can see us using regular authentication to the
server.

So something is causing ssl to fail and we are falling back to a regular non
secure connection on the mac. 

Comment 20

[Karen Huang]

Adding SSL on the summary....

Comment 21

[John Unruh]

rtm

Comment 22

[John Unruh]

Adding regression keyword due to comments from shadow.

Comment 23

[selmer (gone)]

For those of us who have never even used ssl imap, how large a portion of our
users will even know this bug exists?

Comment 24

[Scott MacGregor]

In addition, imap ssl was never an IN feature for this product anyway. Pav
hacked it up on his own and we took ownership from him. So this isn't even on
the PRD.

I'd recommenda  rtm- for this bug and we'll release note that SSL for imap on
the Mac doesn't work.

Comment 25

[kmurray1115]

I'd have to agree with mscott.

Comment 26

[selmer (gone)]

rtm-, not even an IN feature!  Removing regression keyword.

Comment 27

[John Unruh]

In that case the "Use secure connection (ssl)" UI should be removed from the Mac 
Mail/News Account settings. (Click on Server to see the pref).

Comment 28

[lchiang]

Esther - can you get it coordinated to file a new bug on the removal of the UI
and track it from there.  If necessary, we can just release note, but let's take
that to the another bug report.

Comment 29

[Scott MacGregor]

Let's just release note it. There's no easy way to disable the UI on the Mac
only.....

Comment 30

[Scott MacGregor]

I also don't think we need another bug. Just use this one with a release note
and then we can leave it open to fix imap ssl on the mac post rtm. 

Comment 31

[John Unruh]

This appears to be fixed in the 11/8 Branch Mac build.

Comment 32

[Karen Huang]

By using 11-08-00-MN6 build with the following two steps setup:
- Security Manager|Application: Setup "Ask Every time"
- Security Manager|Certificates: Restore an AOL Certificate

I need to reopen this bug since I got pass for new profile but failed for 
migrated profile:

For new profile: with above setup - pass for new profile
For migrated profiles: Certificate not been brought to 6.0, the PSM password 
dialog only displayed for new profile, but not for the migrated profile......
Updating the summary since this is only occurring on the Mac migrated profile 
for certificate part!!

Comment 33

[David :Bienvenu]

adding keyword

Comment 34

[John Unruh]

Marking fixed. SSL/IMAP works. The real problem is Bug 60342 - "Mac-Security 
folder is not migrated"

Comment 35

[John Unruh]

Verified fixed.

Comment 36

[Karen Huang]

Yes. This is working for the migrated profile on the Mac now.
Verified on 11-29-10-Mtrunk build.