Thunderbird Community Forum

i can not receive mails, since the update to 128.5.2ESR not on imap.strato.com not on imap.gmail.com not on mail.yourhosting.com

just since today after the update. sending emails seems to work.

I did NOT change anything in the accounts.

How to solve????

Thank you.

Typically if I experience a security certificate exception, thunderbird will popup the certificate exception box, I click to get certificate and am done.

Today I cannot get the certificate popup to appear. which is fine I know where the certificates are managed but I have not a clue how to add a certificate OR what information to enter into the "Add security exception" dialogue box

Any help would be greatly appreciated.

Bonjour

Depuis quelques jours je rencontre le message suivant:

L’envoi du message a échoué. Une erreur est survenue lors de l’envoi de l’e-mail. Le serveur e-mail a répondu : 1jHjuyBzCXgNw StartTLS obligatoire. StartTLS mandatory.OFR303_199 [199]. Veuillez vérifier que votre adresse e-mail dans les paramètres du compte est correcte et essayer à nouveau.

Dans les paramètres du compte tout semble OK Merci pour votre aide Cordialement

I regularly send/receive encrypted email on Windows with Outlook but seeing as most of my work is done on my Ubuntu partition, I was interested in a Linux solution. I was able to connect to my exchange server using owl automagically and see my email, no problem. I had some experience getting smart-card readers working on Ubuntu so I already had some things in place using the OpenSC Security Device. TB was able to talk to my card reader, grab the certificates, and I was able to set my S/MIME digital signing and encryption certificates. It definitely works, I can decrypt messages that I had already received in the way I expect, it checks if I have a card inserted, asks for me PIN, and the message decrypts correctly as I would expect. The issue is that if I try to send a signed email to myself, I get the error, "Sending of the message failed. You specified that this message should be digitally signed, but the application either failed to find the signing certificate specified in your Mail & Newsgroup Account Settings, or the certificate has expired." A similar message is sent if I try to encrypt (but not sign) a message to myself but for the encryption certificate.

I don't understand this message, as TB can definitely see my card, ask my card for my private key, and use it to decrypt messages, so I believe my E2E settings are correct. Neither certificate is expired, both expire sometime in 2027. I even added my companies root certificate to my Certificate Authorities in TB, so I don't believe it's an issue with my certificate being deemed invalid, and the error message certainly doesn't suggest as much. I've also tried both of my card-readers in case something was only looking at the first one, but both can be signed into correctly but neither let me send signed/encrypted email. The only clues I can see are the console error in my terminal when the message fails to send...

console.error: mailnews.send: "Sending failed; , exitCode=2147500037, originalMsgURI="

Also when I open a remote debugging session, this is the error shown...

mailnews.send: NS_ERROR_FAILURE: Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIMsgComposeSecure.beginCryptoEncapsulation]

   _startCryptoEncapsulation resource:///modules/MimeMessage.jsm:510
   _writePart resource:///modules/MimeMessage.jsm:558

Does anyone know what I might be doing wrong and nudge me in the correct direction?

With the latest updates, the client no longer accepts the self-signed smtp certificate as exceptions. The server is old and there is no way to upgrade to a newer one. It is also not possible to connect a third-party certification authority

I am using a E-mail server that uses LetsEncrypt certificates. I was using Thunderbird 128 ESR without problems. When the certificate was updated, I was requested to confirm - then sending E-mails was possible. Now I have updated to Thunderbird 140 ESR. The E-Mail servers LetsEncrypt certificate was now updated but in Thunderbird I do not get any information about this, nor get I requested to check the new certificate. The SMTP connection just fails. The IMAP access to the E-mail server works fine. (IMAP and SMTP work both fine with K9-Mail on my mobile device)

How can I get Thunderbird to ask me again to check the updated certificate?

I have spent some time digging through your messages about how to fix this issue. I get the general "where to" enable SSL/TLS but no trouble shooting to this specific level.

Spectrum (charter) Internet on May-30-25 a pop up "Add Security Exception" on wife's account (Image #1 below). We have same Internet provider and same server config's (except email name & password or course).

 This Security Exception has happened before, as well as on my account in the past. 

Although, I never got the Exception this time. We did "Confirm Security Exception" 2x on her account and she is up and running again. No issues.

  However, I can't receive e-mails with the Account Settings / Server Settings / Security Settings

"Connection Security" set to SSL/TLS" it must be set to "None" When set to SSL/TLS and I push the "Get Mail" button, the server isn't even banged as there's no msg in lower left frame of TB. I have gmail account and it does bang that one like it should. If set to "None" I get the msg in lower left TB frame showing connection to Charter server and I receive any outstanding e-mails. But I don't want to continue without a password.

 Under [Settings/ Privacy & security / Manage Certificates]

hers (Image #2 below) looks different than mine (Image #3 below). She has the 2 confirmed Security Exceptions, but also has a "View" and "Export" button that are bolded when the specific line item is highlighted. I do not have a View or Export button shown. How do I enable the SSL/TLS with password and actually receive emails?

 I am using TB 128.11.0esr (64-bit)

thx in advance Gene

When my message filter uses the "Reply with Template" action, the reply e-mail is always PGP encrypted, even when I do not have any public key for the recipient e-mail address. As a result, the reply e-mail is always corrupted.

I am using Thunderbird 140.7.1esr on Windows 10.

I have attached a screenshot of what the reply e-mail always looks like.

In the Template that I am using, the "encrypt" button is not selected, and in the OpenPGP menu of the Template, the "Encrypt" menu item does not have a checkmark next to it.

Does anyone know how I can get Thunderbird to send reply e-mails without using encryption?

From Microsoft: "Recent Outlook Mobile updates introduced a stricter and more standards-aligned S/MIME message structure. The messages themselves are valid, but some third‑party mail clients such as Thunderbird do not fully support the way Outlook mobile structures the encryption. As a result, these clients may display a blank message body even though the encrypted content is present.

As a workaround, if you need to send encrypted mail to recipients who use third‑party clients, use Outlook desktop or Outlook on the web instead of Outlook mobile. These versions generate encrypted messages in a format that is more widely supported. "

I couldn't find this reported anywhere in these forums. Is there a solution being worked on to address this issue? Or has anyone found a workaround? We are stuck with using the Outlook app until the Thunderbird app supports S/MIME.

I am trying to set up for a friend the Thunderbird email client for his BT internet account but am encountering problems.

When using the BT recommended settings: POP3 settings Incoming Mail Server: mail.btinternet.com Port: 995 SSL Encryption: SSL/TLS Username: email address xxxxxxxx@btinternet.com Password: btinternet password SMTP settings Outgoing Mail Server: mail.btinternet.com Port: 465 SSL Encryption: SSL/TLS Authentication: btinternet password Username: email address xxxxxxxx@btinternet.com Password: your btinternet password

I receive the message “Unable to login in at server. Probably wrong configuration, username or password.

However if I change the POP connection security to “None”. All is well.

Can somebody please advise.

Thank you.

I am able to receive emails on Thunderbird but I am not able to send emails to anybody from Thunderbird. That happens on two computers I have. I am able to send emails from Outlook. Therefore, it is not my email provider's (BluePeak) problem. When I try to send an email from Thunderbird, I receive the following error message: “Sending the message failed. SSL received a record with an incorrect Message Authorization Code. The configuration related to must be corrected.”

Please help me resolve this issue. Thank you very much!

Hello!

I just observed a new issue with S/MIME. When trying to send an encrypted mail to somebody new, I get an error “End-to-end encryption requires resolving certificate issues with somebody@example.com”.

The message is not very helpful, and doesn’t propose any solution. So a web search gave me this article: Prerequisite for sending an encrypted email message. It states:

> If Thunderbird considers the email's signature and the sender's certificate valid, it will automatically be imported and available when you attempt to encrypt an email to that correspondent using the S/MIME technology.

When I open the sender’s mail, the signature is confirmed as valid by Thunderbird.

Ignoring the warning message and trying to send the encrypted mail results in the following error in the log: `mailnews.send: NS_ERROR_ILLEGAL_VALUE: Component returned failure code: 0x80070057 (NS_ERROR_ILLEGAL_VALUE) [nsIMsgComposeSecure.beginCryptoEncapsulation]`

So, I verified in my list of certificates for people, and that new person didn’t figure in the list. Other people did, the last one from 6 June.

Is it possible there’s a bug causing TB to not import the certificate when I open the mail? What would a workaround be? Is there a way to import a sender’s certificate manually from their signed mail?

Certificate errors have been an ongoing, several-times-a-day frustration for me and other users, with different ISPs, since approximately June 25. Is anyone working on this bug? Because it clearly is a bug: Not only I but several other users have reported that Thunderbird worked fine until that date, then stopped working fine. What changed, and can it be put back the way it was, or can we receive some explicit instructions on how to fix it for ourselves? It's making Thunderbird borderline unusable. Every time I try to send a message, I have to confirm a security exception, then send it again. Several times a day, when I try to fetch messages, I have to confirm security exceptions. The confirmations never seem to stick. This is some BS.

I ask a person to send me a signed email so that i can send them an encrypted email. How is this process supposed to work in thunderbird? I receive a signed email, what next? Clearly, thunderbird sees the signature but does not add the public key to the contact. This is in contradiction with [page] that states: The standard way of distributing a person's certificate is to send a digitally signed email. If you have received a signed email from your correspondent, click the email to view it. If Thunderbird considers the email's signature and the sender's certificate valid, it will automatically be imported and available when you attempt to encrypt an email to that correspondent using the S/MIME technology. If you don't have a signed email from your correspondent yet, you could ask them to send a digitally signed email to you.

Note that certificates issued by CAs may have a short validity period. Certificates are no longer usable after the validity period has expired. In that case your correspondent will have to obtain a new certificate. Once that happened they will be able to send you a new digitally signed email with a valid certificate.

Organizations that operate an LDAP server may configure their server to store S/MIME certificates. If an LDAP server is configured, Thunderbird may automatically query the LDAP server if it needs to obtain a S/MIME certificate.

To review the list of S/MIME certificates that you already have, you can use Thunderbird's Certificate Manager.

The certificate shows that it is valid, yet, clicking reply gives "key issues" which shows no key available. Similarly, if I sign an email with pgp key and send it, thunderbird sees that it is signed but tells me that i need to obtain public pgp key. So it seems that signatures and encryption are completely unusable.

I'm trying to send encrypted email to a recipient who I have a certificate for, but Thunderbird states:

End-to-end encryption requires resolving certificate issues for ....

That's rather unhelpful - what issues exactly? I've imported the CA certs into the system and they are shown in TB. openssl verify on the cert returns OK. I'm at a loss as to what might be the issue.

Hello.

I have added a new account to Thunderbird, and it is not syncing to show new messages. I am getting a pop-up from Tbird saying "The certificate for mail.newcreationloughborough.uk is not valid for that server ..." etc. I have gone through the procedure titled 'Troubleshooting email client warnings about invalid server certificates' to add Norton's certificate to my email app (as directed by the 'resolve' link in the 'Resolve email sync issues caused by certificate warnings' from the Norton EE Cyber Security add-on), and it tells me that the certificate is already installed.

What can I do next to get it to sync?

I've finished setting up the S/MIME encryption in Thunderbird, and imported all the certificates needed. When people with the certificates emailed me, I could receive and read all the emails. However, when I replied to the same people, I got the error message saying 'End-to-end encryption requires resolving cerficiate issues'. My colleagues imported the same certificates without any issues. Do you have any suggestions for me to solve the issue? Thank you very much!

Hi All. New to Thunderbird but liking what I see. Am trying to install a new certificate but keep seeing the same error message when I attempt to send an email:

Sending of the message failed. You specified that this message should be digitally signed, but the application either failed to find the signing certificate specified in your Mail & Newsgroup Account Settings, or the certificate has expired.

So here is what we know:

The certificate seems to work (I've sent test emails to a couple of test email accounts) when I use it in Outlook safe mode. Can't get it to work in normal Outlook mode because of add-ins, hence my switch to Thunderbird. They seem to appear fine in the S/MIME section for digital signing and encryption and I can even see the certificate when I go into Manage S/MIME Certificates.

Has anyone come across this before / got any ideas about how to resolve this? Thanks!!

I've encountered an issue specifically with OpenPGP encrypted emails in the latest version of Thunderbird, 140.0.1.

When I receive an email that is encrypted with OpenPGP, the notification bar that allows me to "Load Remote Content" does not appear. This behavior is exclusive to encrypted emails; the option shows up normally for all other, non-encrypted messages.

As a troubleshooting step, I tried to enable the "Allow remote content in messages" option. However, this setting does not seem to affect the encrypted emails at all, and their remote content remains blocked and hidden.

So, I'd like to know if this is an intentional security policy in Thunderbird, or if it's a bug. Is there any way to solve it?

Hello, My SMTP server uses Let's Encrypt certificate. The website with the same domain has no certificate. Thunderbird refuses to connect to my SMTP server. Test connection to the server (STARTTLS) in account settings sais "The secure connection to the server failed" (or similar. I see bg localization). Another server with Let's Encrypt certificate. Test pases. Clicking View certificate shows webserver cert (from DigiCert Inc).

I can't send emails! :)

Regards! Valentin