614109 - Thunderbird failed to find my signing certificate that I just installed

Status: RESOLVED DUPLICATE of bug 531073

(Thunderbird :: Security, defect)

Description

[dan3ny]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12 (.NET CLR 3.5.30729)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6

I've been using free email certificates from Comodo for several years.  (http://www.comodo.com/home/email-security/free-email-certificate.php).
The certificate for one of my identities expired over the weekend, which Thunderbird notified me about.  I got a new one, but while it installs, Thunderbird still says it can't find it for signing.

Note that other identities' certificates work fine.

Reproducible: Always

Steps to Reproduce:
1. Install the certificate / identity received from http://www.comodo.com/home/email-security/free-email-certificate.php
2. Specify that the outgoing mail should be signed
3. compose and send mail
Actual Results:  
Send Message Error:
Sending of message failed.
You specified that this message should be digitally signed, but the application either failed to find the signing certificate specified in your Mail & Newsgroup Account Settings, or the certificate has expired.

Expected Results:  
Mail is signed and sent

- The Certificate Name shows up very strange (see the first line in certName.png, and certDetails.png, versus GoodButExpiredCert.png)

- When I install the cert/identity into Outlook, Outlook is happy with it (see Outlook.png)

- Reading the mail that Outlook sent, TBird won't validate it (see digSigInvalid.png)

- Clicking on the "invalid signature" icon (as in digSigInvalid.png) and then "View Signature Certificate" TBird reports that it "Could not verify this certificate for unknown reasons. (see unknownReasons.png).

- the certificate (and not the private key) is included as dannyv.crt

Comment 1

[dan3ny]

Attachment: funny certificate name

- The Certificate Name shows up very strange (see the first line in certName.png, and certDetails.png, versus GoodButExpiredCert.png)

Comment 2

[dan3ny]

Attachment: certDetails.png

- The Certificate Name shows up very strange (see the first line in certName.png, and certDetails.png, versus GoodButExpiredCert.png)

Comment 3

[dan3ny]

Attachment: GoodButExpiredCert.png

- The Certificate Name shows up very strange (see the first line in certName.png, and certDetails.png, versus GoodButExpiredCert.png)

Comment 4

[dan3ny]

Attachment: Outlook.png

- When I install the cert/identity into Outlook, Outlook is happy with it (see Outlook.png)

Comment 5

[dan3ny]

Attachment: digSigInvalid.png

- Reading the mail that Outlook sent, TBird won't validate it (see digSigInvalid.png)

Comment 6

[dan3ny]

Attachment: unknownReasons.png

- Clicking on the "invalid signature" icon (as in digSigInvalid.png) and then "View Signature Certificate" TBird reports that it "Could not verify this certificate for unknown reasons. (see unknownReasons.png).

Comment 7

[dan3ny]

Attachment: dannyv.crt

- the certificate (and not the private key) is included as dannyv.crt

Comment 8

[Ludovic Hirlimann [:Usul]]

Do you have the comodo root cert installed in TB if not that's why you see the untrusted message. See bug https://bugzilla.mozilla.org/show_bug.cgi?id=606947 , so adding the root cert would fix part of your issue.

In tools -> Account Settings -> security for your account is the cert selected ?

Comment 9

[dan3ny]

I just imported the 3 of them in that bug into TB in case they weren't there.  
Verified that Tools->Account Settings->security does have that cert selected.
Shut down TB and restarted just in case.  No change.

Comment 10

[Ludovic Hirlimann [:Usul]]

(In reply to comment #9)
> I just imported the 3 of them in that bug into TB in case they weren't there.  
> Verified that Tools->Account Settings->security does have that cert selected.
> Shut down TB and restarted just in case.  No change.

And can you select it ( has this needs to be done in the workflow that's implemented in Thunderbird.

Comment 11

[dan3ny]

Attachment: CertsSelected

Yes, the certificate is selected.  This screenshot shows it as selected from Tools->Account Settings->Security, and the results of pressing the "Select..." button as well to show the certificate validity

Comment 12

[Ludovic Hirlimann [:Usul]]

consolidating those can't find certs into one issue, the oldest.