487498 - IMAP SSL Certificate Confirmation in an infinite loop, requires restart

Status: NEW

(Thunderbird :: Security, defect)

Description

[Brian C. Lane]

User-Agent:       Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_6; en-us) AppleWebKit/528.16 (KHTML, like Gecko) Version/4.0 Safari/528.16
Build Identifier: Shredder Updated 4/8/2009

After the automatic update on 4/8/2009 it started warning about a domain name mismatch on the IMAP SSL certificate (I use a self-signed cert with a domain of *), it does not allow me to accept it and when canceled returns to the warning page.

This blocks access to the rest of the program.


Reproducible: Always

Comment 1

[Brian C. Lane]

To be clear, this is with Thunderbird 3 (shredder) on OSX. Initial download was about a month ago and it has been using automatic updates since.

Comment 2

[Ludovic Hirlimann [:Usul]]

Brian, if you go back to a build from the 3/8/2009 does it work ?

Can you attach a screen shot of the error ?

Comment 3

[Brian C. Lane]

I can't get it to do it now. I went back to using TB2 for the rest of the day and then tried TB3 again and it complained once and then has been working normally since. It also updated itself today and is still working fine.

Comment 4

[Mark Banner (:standard8)]

Not blocking as this sounds like the problem has gone away. Also haven't heard of any potential duplicates.

Comment 5

[Wayne Mery (:wsmwk)]

Brian, want to close this worksforme, and reopen if you see it again?

Comment 6

[Brian C. Lane]

Actually, I ran into this again when my IMAP ssl cert expired early last month. I had to delete the expired cert using the Preferences->Advanced->certificates dialog. The dialog shown with the error wouldn't let me do anything to override it.

I then used the same dialog to add the new certificate.

Comment 7

[Robert Eden]

I just ran into this when my IMAP SSL Cert expired. Thunderbird 3.0b4

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Thunderbird/1.0.6 Mnenhy/0.7.3.0

I tried the "accept certificate" but the dialog kept popping up.

I then fixed the cert on the server, but Tbird seemed to keep using a cached (invalid) certificate.

I killed Tbird via task manager, restarted and all is well.

So two issues... 
#1, bad certificate is being cached and not refreshed.
#2, no way to accept an expired cert

Comment 8

[John Gateley]

I downloaded Thunderbird 3,0b4 just now. I have an expired certificate on my imap server. When starting Thunderbird for the first time, I saw the infinite loop mentioned above. The warning dialog popped up. I hit "accept" with the "permanent" check box selected, and it would return to the dialog. Hitting cancel had the same effect. I killed thunderbird from the command line.

After killing it, I restarted and things are working.

I'm using Mac OS X 10.5.8

Comment 9

[Karanbir Singh]

Problem persists with : 

Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.9.1.7) Gecko/20100117 Shredder/3.0.2pre

Comment 11

[Wayne Mery (:wsmwk)]

(In reply to comment #10)
> *** Bug 590309 has been marked as a duplicate of this bug. ***

590309 is reported with v3.1, and brian hasn't said this is gone, so confirming, and leaving qawanted.

Comment 12

[Karanbir Singh]

Now using the ESR builds, problem has gone away

Comment 13

[Ludovic Hirlimann [:Usul]]

(In reply to Karanbir Singh from comment #12)
> Now using the ESR builds, problem has gone away

Any other people experiencing the issue ?

Comment 14

[Hashem Masoud]

(In reply to Ludovic Hirlimann [:Usul] from comment #13)
> (In reply to Karanbir Singh from comment #12)
> > Now using the ESR builds, problem has gone away
> 
> Any other people experiencing the issue ?

Yes, bug 769517.

Comment 17

[Peter Remmers]

(In reply to Ludovic Hirlimann [:Usul] from comment #13)
> (In reply to Karanbir Singh from comment #12)
> > Now using the ESR builds, problem has gone away
> 
> Any other people experiencing the issue ?

Yes!
Our self-signed server certificate expired a few days ago and has been updated, and I had the same issue again.

The confirmation dialog pops up and even if you tick "save exception" and click "allow", it immediately pops up again. Doesn't matter if you click save or cancel, it continues to pop up for another estimated 20-50 times. I had to keep the ESC key pressed for about a minute until it stopped.

Having done that, closing and restarting Thunderbird makes the dialog pop up one more time, and saving the exception there helps, and TB is usable again.

My guess is that there is an update interval, and for each server-check, one instance of this dialog is queued, and when you come back to your Thunderbird the next day, you have to dismiss all of the queued dialogs. I have Thunderbird installed at home and at work, and I was away from my home TB for only a day, and the number of dialogs to dismiss was far less than on my work TB where I was away for the whole weekend.

This is TB 45.3.0, Build-ID 20160825102941, Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0

Account: IMAP/STARTTLS/Password, normal

Comment 18

[Peter Remmers]

Maybe this hasn't become clear: my Thunderbirds are running 24/7, and this happens when the certificate is updated while it is running. As the restart shows, if you start TB and confirm the dialog immediately, all is good, but if you leave the dialog open for longer, you have to confirm more and more dialogs the longer you wait.