If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

When get mail for first time from Yahoo it appears a window to select a certificate (a personal certificate must be installed)

RESOLVED WORKSFORME

Status

Thunderbird
Security
RESOLVED WORKSFORME
7 years ago
2 years ago

People

(Reporter: Sandro Della Giustina, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Reporter)

Description

7 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.9.2.10) Gecko/20100914 Firefox/3.6.10
Build Identifier: Thunderbird 3.1.4

If you have a personal certificate S/MIME and you try to download mail from popmail.yahoo.com (using SSL) Thunderbird ask to select a certificate. To proceed it is necessary to cancel the window.  
It happens at the first time, after cancelling the request Thunderbird never ask until it is restarted.

It is an annoiance, if you click on "OK" button it associate the personal certificate  and all future connection with the server fails.





Reproducible: Always

Steps to Reproduce:
1. Get a personal certificate S/MIME. You could get a free certificate from here:
http://www.globaltrust.it/modulo_reg_smime.asp
2. Install the certificate in Thunderbird following instructions 
3. configure an Yahoo! account using SSL (default configuration suggested by the account Wizard)
4. Start Thunderbird
4. Get Mail from this account

5. 


Expected Results:  
Thundebird download the mail without showing the request of certificate.


A Window appear, it says to select a certificate to complete the transaction with the server, Thunderbird suggest the personal certificate.

http://it.tinypic.com/r/2j2i1sg/7

Clicking on "Cancel" all works fine, but if you click on OK button you'lll never able to get mail from Yahoo! account in future.

It happens only with Yahoo! with Gmail no problem.
can we get an im
oups, can we get an imap log, see https://wiki.mozilla.org/MailNews:Logging on how to obtain one.
Component: General → Security
QA Contact: general → thunderbird
(Reporter)

Comment 3

7 years ago
This is the log file, I have cancelled the window that ask for certificate and I have closed TB. 

The strange thing is that this window appears only at the first time I try to get mail.

I have created it with my default profile (it have 6 accounts configured), if you wish to have a clean log  with a new profile with only the Yahoo! account configured, I can provide it

0[1b28140]: Setting server busy in nsPop3Protocol::LoadUrl
0[1b28140]: Entering NET_ProcessPop3 46
0[1b28140]: POP3: Entering state: 1
0[1b28140]: POP3: Entering state: 2
0[1b28140]: POP3: Entering state: 4
0[1b28140]: RECV: +OK <15138.1287481484@pop3d2-vf.vf.aruba.it>
0[1b28140]: POP3: Entering state: 26
0[1b28140]: SEND: AUTH

0[1b28140]: Entering NET_ProcessPop3 26
0[1b28140]: POP3: Entering state: 3
0[1b28140]: RECV: -ERR authorization first
0[1b28140]: POP3: Entering state: 27
0[1b28140]: POP3: Entering state: 28
0[1b28140]: SendCapa()
0[1b28140]: SEND: CAPA

0[1b28140]: Entering NET_ProcessPop3 26
0[1b28140]: POP3: Entering state: 3
0[1b28140]: RECV: -ERR authorization first
0[1b28140]: POP3: Entering state: 29
0[1b28140]: POP3: Entering state: 30
0[1b28140]: ProcessAuth()
0[1b28140]: POP auth: server caps 0x4AA, pref 0x1C00, failed 0x0, avail caps 0x400
0[1b28140]: (GSSAPI = 0x100000, CRAM = 0x2000, APOP = 0x4000, NTLM = 0x8000, MSN =  0x10000, PLAIN = 0x1000, LOGIN = 0x800, USER/PASS = 0x400)
0[1b28140]: trying auth method 0x400
0[1b28140]: POP username
0[1b28140]: POP3: Entering state: 5
0[1b28140]: OnPromptStart()
0[1b28140]: Entering NET_ProcessPop3 0
0[1b28140]: POP3: Entering state: 48
0[1b28140]: SendUsername()
0[1b28140]: USER login
0[1b28140]: SEND: USER sandrodll

0[1b28140]: Entering NET_ProcessPop3 6
0[1b28140]: POP3: Entering state: 3
0[1b28140]: RECV: +OK 
0[1b28140]: POP3: Entering state: 31
0[1b28140]: NextAuthStep()
0[1b28140]: POP3: Entering state: 6
0[1b28140]: POP3: Entering state: 50
0[1b28140]: SendPassword()
0[1b28140]: PASS password
0[1b28140]: Logging suppressed for this command (it probably contained authentication information)
0[1b28140]: Entering NET_ProcessPop3 6
0[1b28140]: POP3: Entering state: 3
0[1b28140]: RECV: +OK 
0[1b28140]: POP3: Entering state: 31
0[1b28140]: NextAuthStep()
0[1b28140]: login succeeded
0[1b28140]: POP3: Entering state: 7
0[1b28140]: SEND: STAT

0[1b28140]: Entering NET_ProcessPop3 9
0[1b28140]: POP3: Entering state: 3
0[1b28140]: RECV: +OK 0 0
0[1b28140]: POP3: Entering state: 8
0[1b28140]: BeginMailDelivery acquiring semaphore
0[1b28140]: Calling ReleaseFolderLock from AbortMailDelivery
0[1b28140]: ReleaseFolderLock haveSemaphore = TRUE
0[1b28140]: POP3: Entering state: 22
0[1b28140]: SEND: QUIT

0[1b28140]: Entering NET_ProcessPop3 6
0[1b28140]: POP3: Entering state: 3
0[1b28140]: RECV: +OK 
0[1b28140]: POP3: Entering state: 40
0[1b28140]: POP3: Entering state: 23
0[1b28140]: POP3: Entering state: 25
0[1b28140]: Clearing server busy in POP3_FREE
0[1b28140]: Clearing running protocol in POP3_FREE
0[1b28140]: Clearing server busy in OnStopRequest
0[1b28140]: Setting server busy in nsPop3Protocol::LoadUrl
0[1b28140]: Entering NET_ProcessPop3 60
0[1b28140]: POP3: Entering state: 1
0[1b28140]: POP3: Entering state: 2
0[1b28140]: POP3: Entering state: 4
0[1b28140]: RECV: +OK hello from popgate 2.46.7 on pop024.mail.ukl.yahoo.com
0[1b28140]: POP3: Entering state: 26
0[1b28140]: SEND: AUTH

0[1b28140]: Entering NET_ProcessPop3 30
0[1b28140]: POP3: Entering state: 3
0[1b28140]: RECV: -ERR popgate unknown command
0[1b28140]: POP3: Entering state: 27
0[1b28140]: POP3: Entering state: 28
0[1b28140]: SendCapa()
0[1b28140]: SEND: CAPA

0[1b28140]: Entering NET_ProcessPop3 112
0[1b28140]: POP3: Entering state: 3
0[1b28140]: RECV: +OK CAPA list follows
0[1b28140]: POP3: Entering state: 29
0[1b28140]: RECV: EXPIRE NEVER
0[1b28140]: capa processed
0[1b28140]: POP3: Entering state: 29
0[1b28140]: RECV: IMPLEMENTATION popgate 2.46.7
0[1b28140]: capa processed
0[1b28140]: POP3: Entering state: 29
0[1b28140]: RECV: PIPELINING
0[1b28140]: capa processed
0[1b28140]: POP3: Entering state: 29
0[1b28140]: RECV: RESP-CODES
0[1b28140]: capa processed
0[1b28140]: POP3: Entering state: 29
0[1b28140]: RECV: TOP
0[1b28140]: capa processed
0[1b28140]: POP3: Entering state: 29
0[1b28140]: RECV: UIDL
0[1b28140]: capa processed
0[1b28140]: POP3: Entering state: 29
0[1b28140]: RECV: USER
0[1b28140]: capa processed
0[1b28140]: POP3: Entering state: 29
0[1b28140]: RECV: .
0[1b28140]: capa processed
0[1b28140]: POP3: Entering state: 30
0[1b28140]: ProcessAuth()
0[1b28140]: POP auth: server caps 0x204AA, pref 0x1C00, failed 0x0, avail caps 0x400
0[1b28140]: (GSSAPI = 0x100000, CRAM = 0x2000, APOP = 0x4000, NTLM = 0x8000, MSN =  0x10000, PLAIN = 0x1000, LOGIN = 0x800, USER/PASS = 0x400)


0[1b28140]: trying auth method 0x400
0[1b28140]: POP username
0[1b28140]: POP3: Entering state: 5
0[1b28140]: OnPromptStart()
0[1b28140]: Entering NET_ProcessPop3 0
0[1b28140]: POP3: Entering state: 48
0[1b28140]: SendUsername()
0[1b28140]: USER login
0[1b28140]: SEND: USER sandrodll

0[1b28140]: Entering NET_ProcessPop3 24
0[1b28140]: POP3: Entering state: 3
0[1b28140]: RECV: +OK password required.
0[1b28140]: POP3: Entering state: 31
0[1b28140]: NextAuthStep()
0[1b28140]: POP3: Entering state: 6
0[1b28140]: POP3: Entering state: 50
0[1b28140]: SendPassword()
0[1b28140]: PASS password
0[1b28140]: Logging suppressed for this command (it probably contained authentication information)
0[1b28140]: Entering NET_ProcessPop3 47
0[1b28140]: POP3: Entering state: 3
0[1b28140]: RECV: +OK maildrop ready, 0 messages (0 octets) (0)
0[1b28140]: POP3: Entering state: 31
0[1b28140]: NextAuthStep()
0[1b28140]: login succeeded
0[1b28140]: POP3: Entering state: 7
0[1b28140]: SEND: STAT

0[1b28140]: Entering NET_ProcessPop3 9
0[1b28140]: POP3: Entering state: 3
0[1b28140]: RECV: +OK 0 0
0[1b28140]: POP3: Entering state: 8
0[1b28140]: BeginMailDelivery acquiring semaphore
0[1b28140]: Calling ReleaseFolderLock from AbortMailDelivery
0[1b28140]: ReleaseFolderLock haveSemaphore = TRUE
0[1b28140]: POP3: Entering state: 22
0[1b28140]: SEND: QUIT

0[1b28140]: Entering NET_ProcessPop3 25
0[1b28140]: POP3: Entering state: 3
0[1b28140]: RECV: +OK server signing off.
0[1b28140]: POP3: Entering state: 40
0[1b28140]: POP3: Entering state: 23
0[1b28140]: POP3: Entering state: 25
0[1b28140]: Clearing server busy in POP3_FREE
0[1b28140]: Clearing running protocol in POP3_FREE
0[1b28140]: Clearing server busy in OnStopRequest
0[1b28140]: Calling ReleaseFolderLock from ~nsPop3Sink
0[1b28140]: ReleaseFolderLock haveSemaphore = FALSE
0[1b28140]: Calling ReleaseFolderLock from ~nsPop3Sink
0[1b28140]: ReleaseFolderLock haveSemaphore = FALSE
(In reply to comment #3)
> This is the log file, I have cancelled the window that ask for certificate and
> I have closed TB. 
> 
> The strange thing is that this window appears only at the first time I try to
> get mail.
> 
> I have created it with my default profile (it have 6 accounts configured), if
> you wish to have a clean log  with a new profile with only the Yahoo! account
> configured, I can provide it

Please - and attach the log file using the add an attchment link above.
(Reporter)

Comment 5

7 years ago
Created attachment 484691 [details]
LOG file of the POP3 connection
(Reporter)

Comment 6

7 years ago
Ok,  I have attached the log file, sorry to have inserted it in my comment, I thought that attachment are also for patch.

I have created a new profile (TB 3.1.5), configured only the Yahoo! account (using default account wizard), imported my S/MIME certificate and created the log file.

Obviously, if I configure the Yahoo! account without using SSL autentification (it works) the error disappears.
Ben could you have a look at the log please ?

Comment 8

7 years ago
ludo, this log is useless to debug this problem. It happens on the SSL level.
(In reply to comment #8)
> ludo, this log is useless to debug this problem. It happens on the SSL level.

Crap , ain't sure if we can log ssl.
(In reply to Ludovic Hirlimann [:Usul] from comment #9)
> (In reply to comment #8)
> > ludo, this log is useless to debug this problem. It happens on the SSL level.
> 
> Crap , ain't sure if we can log ssl.

Brian perhaps knows?
Sandro, do you still see this problem?
Flags: needinfo?(gialloporpora)
Whiteboard: [closeme 2015-12-15]
(Reporter)

Comment 12

2 years ago
Sorry for the delay of my reply, I had no Internet connection last week. 
I have forgotten this bug, but to reply at your request: no, the problem is fixed in some version of TB, I think some months after I have opened the bug. 
I think bug could be closed.
Flags: needinfo?(gialloporpora)
Thanks for the update! Very helpful.
And thanks for such a well detailed bug report.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → WORKSFORME
Whiteboard: [closeme 2015-12-15]
You need to log in before you can comment on or make changes to this bug.