Thunderbird Community Forum

Hi Folks,

I want to seek opinion on how to manage the virus detected in emails (or its attachments) through Kaspersky Anti Virus.

I have large no of emails in TB stored in mbox format. Around 30GB in Inbox and another 5GB in Sent, etc. I also use Kaspersky Internet Security which has anti-virus also active.

Now my anti virus detects some infected emails. How to clean the infected virus emails / attachments.

Question: 1) When using mbox file on TB, is Kaspersky capable to delete ONLY a single specific infected file from the entire mbox data without any corruption of mail data? 2) If not, how to setup the anti-virus to automatically clean, disinfect and delete/quanrantine individual mail. ?

3) Is MailDir a better way to save emails in profile and use anti-virus. There is a warning on Maildir saying its still not settled and may have bugs. Is that true even today ?

Thanks & Regards, Tejas

Hallo,

in an effort to understand why one s/mime signed message I received could not be verified by Thunderbird (140.3.0esr (64-bit) on Ubuntu 24.04.3 LTS) (error 1041, "unknown problems with this digital signature"), but by all other clients I and others could check (including cli tools openssl, cmsutil), I did a few tests using my own certificate (using rsaEncryption, SHA256).

Inital observation: Messages signed with "openssl smime -sign -in msg.txt -to <email> -from <my-email> -subject test -signer mycert.pem -inkey mykey.pem -out signed.eml" and opened in Thunderbird showed error 1041. Any modifiers like -crlfeol, -text, -binary, ... did not make a difference.

Omitting signed attributes (-noattr) however helped. The signature was verified.

Looking at the signed attributes, nothing seems wrong: hash in messageDigest is correct, sha256 and rsaEncryption is given. Checking more carefully the signature, the hash of the attribute section is also correct. Manually verifying the DER attribute section with the given signature is also fine.

The question is, what is the reason that Thunderbird rejects the signature? I didn't manage to produce a log output of the verification, so this general error 1041 is all I have. Is Thunderbird more strict as openssl? And if so, at what point?

The only point I see where there could be a problem in handling the attributes is the header of the DER attribute section. In the full signature this starts with 0xa0, as stand-alone block it should be 0x31 - only then the hash matches. However, that's wild guessing.

Any ideas? Already some info on how to access a log output on the verification would help.

I am trying to sign an email with my dsc token. Token contains Digital Signature, Non-Repudiation and E-mail Protection, Document Signing, 1.2.840.113583.1.1.5, Smartcard Login, Client Authentication key usages. Encryption is not required. Only want to sign. Able to see the the certificate in both account setting and thunderbird settings. But still when I select sign and try to send a mail, not prompting for PIN and failing with " Sending of the message failed. You specified that this message should be digitally signed, but the application either failed to find the signing certificate specified in your Mail & Newsgroup Account Settings, or the certificate has expired." error message