806107 - Thunderbird did not complain about outdated certificate

Status: RESOLVED WORKSFORME

(Thunderbird :: Security, defect)

Description

[Toralf Förster]

User Agent: Mozilla/5.0 (X11; Linux i686; rv:16.0) Gecko/20100101 Firefox/16.0
Build ID: 20121022202630

Steps to reproduce:

I had to follows this site

http://giantdorks.org/alain/updating-expired-startcom-class-1-primary-intermediate-server-ca-certificate/comment-page-1/#comment-60198

to fetch news messages from news.eternal-september.org again


Actual results:

Thunderbird shows in the lower left corner "connected to ..." but that's all - no new messages were fetched nor the existing bodies of the messages (headlines were visible) were shown.



Expected results:

a hint that the certificate is over

Comment 1

[Rhodri James]

Related to this, Thunderbird 31.0 (Ubuntu 14.04) also gives no hint that the certificate for the IMAP server it is connecting to has expired.  Possibly this is because the certificate has a specific exemption, being a self-signed in-house cert.

(Actual and Expected Results as for Toralf above)

Comment 2

[Magnus Melin [:mkmelin]]

For 31, you're probably seeing bug 1036338.

Comment 3

[Rhodri James]

Possibly, but unlike the comments in bug 1036338 my system sprang back into life when my boss generated a new (unexpired) certificate.  I may also be wrong about it being self-signed; I'm not the mail admin, just the person who recently switched to Thunderbird.

Not getting an error report that the certificate had expired is definitely a bug in its own right.

Comment 4

[Wayne Mery (:wsmwk)]

(In reply to Magnus Melin from comment #2)
> For 31, you're probably seeing bug 1036338.

This was fixed in version 31 last fall. Do you still see the problem?

Comment 5

[Toralf Förster]

nope , can be closed IMO