Where is generated private key stored during S/MIME CSR generation?
I generated a CSR file via the instructions at https://support.mozilla.org/en-US/kb/instructions-smime-certificate-using-csr#thunderbird:linux:tb145 . After submitting and receiving a certificate from a CA, importing it the People tab of the Certificate Manager does not do anything: nothing new appears in the Your Certificates tab.
Where are the private keys associated to the generated CSRs stored? How can I access them to resolve this?
Running 140.5.0esr via flatpak on Fedora 43 Kinoite.
Chosen solution
Ok, so it appears this is may be a problem handling Sectigo's S/MIME certificate generation. It appears that if downloaded too quickly, Sectigo's initial file does not actually contain the key (checking with openssl x509). Downloading again, it did contain the key, though loading it required restarting Thunderbird before it eventually showed up.
Showing orphan private keys in the certificate manager (eg, the ones that show up with certutil -K) might make this process less stressful.
Read this answer in context 👍 0All Replies (1)
Seçilmiş Həll
Ok, so it appears this is may be a problem handling Sectigo's S/MIME certificate generation. It appears that if downloaded too quickly, Sectigo's initial file does not actually contain the key (checking with openssl x509). Downloading again, it did contain the key, though loading it required restarting Thunderbird before it eventually showed up.
Showing orphan private keys in the certificate manager (eg, the ones that show up with certutil -K) might make this process less stressful.