510820 - imaps with client certificate continually prompts me to choose certificate

Status: RESOLVED WORKSFORME

(Thunderbird :: Security, defect)

Description

[Jason Haar]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.2) Gecko/20090803 Fedora/3.5.2-2.fc11 Firefox/3.5.2
Build Identifier: 3.0b3

Hi there

I'm running Fedora-11 and just got auto-updated from 3.0b2 to 3.0b3 and suddenly I am being prompted to choose which client cert I need to use to connect to my IMAPS server. I think before there used to be a config API like Firefox where you could choose between prompting and automatic? Seems to have disappeared now. The prompt does have a "Remember decision" checkbox - but it doesn't work (tried both checked and unchecked).

Also, I only have one client cert, so there isn't anything to choose anyway - TB should have just sent it. i.e the SSL layer would involve the server telling the client that it expects a client cert signed by (in our case) one CA, so as TB only has access to one client cert, and that cert is indeed signed by the aforementioned CA, then that is the one to use.

BTW, if it helps, the prompt that appears says:

This site has requested that you identify yourself with a certificate
...

Choose a certificate to present as identification

[dropbox with one cert]

Thanks

Jason




Reproducible: Always

Steps to Reproduce:
1. start TB
2. get prompted
3.

Comment 1

[Ludovic Hirlimann [:Usul]]

WFM with Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.3pre) Gecko/20090816 Shredder/3.0b4pre

In Edit -> Prefernce -> Certificates -> select one automatically what do you have ?

Comment 2

[Jason Haar]

There is no "select one automatically" any more - it has View Certificates, Revoke Lists, Validation, Security Devices

This is the thunderbird-3.0-2.6.b3.fc11.i586 that comes standard with Fedora11

I have trashed my $HOME/.thunderbird and re-initialized TB from scratch - so it's not some migration glitch either.

Comment 3

[Ludovic Hirlimann [:Usul]]

confirming - on lnux the option is not visible anymore :-(

Comment 4

[Ludovic Hirlimann [:Usul]]

After updating to a more recnt nightly the option is back. Can you check when newer package for Fedora are built ?

Comment 5

[Magnus Melin [:mkmelin]]

Well the options UI were added after beta3 - bug 326169

Comment 6

[Bob Lord]

I see that pref on my Linux box.  It must have gotten fixed.

Running this version of TB:
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.5) Gecko/20091209 Fedora/3.0-4.fc12 Thunderbird/3.0

Package name:
thunderbird-3.0-4.fc12.x86_64

Please reopen if it goes away again.

Comment 7

[Jason Haar]

yup. The option did come back with a later release. I am now running 3.0.4 under FC12 and the option for automatic/manual is present