587718 - IMAPS: Client doesn't send certificate

Status: RESOLVED WORKSFORME

(Thunderbird :: Security, defect)

Description

[Dirk Gouders]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686 (x86_64); de-DE; rv:1.9.2.7) Gecko/20100713 Firefox/3.6.7
Build Identifier: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.8) Gecko/20100815 Lightning/1.0b2pre Thunderbird/3.1.2

After an upgrade from 3.0.5 to 3.1.x TLS connections to my IMAPS-Server (dovecot port 993)
fail with: Client didn't present valid SSL certificate.
After I answer the failed login dialog with "cancel", TB manages to establish a
connection.

Inspecting the procedure with tcpdump shows that TB doesn't send the client
certificate (length = 0) in a "multiple handshake message".

When I disable the password for the software security device, everything works
without error messages.

Reproducible: Always

Steps to Reproduce:
1.Connect to a dovecot IMAPS server that requires a client certificate and with a master password for the software security device.
2.
3.
Actual Results:  
Error message: Client didn't present valid SSL certificate

Expected Results:  
No error message.

I am willing to help with logs, traces, etc.

Comment 1

[Wayne Mery (:wsmwk)]

Dirk, does it reproduce in a current version?

Comment 2

[Dirk Gouders]

I tested the situation with 11.0 and with this version
the problem does not reproduce.

Comment 3

[Wayne Mery (:wsmwk)]

thanks for the feedback