Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

MacOS Monterey - TBird 91.9.0 - OpenSC/CAC card, TBird will not accept visible cert as S/MIME

  • No replies
  • 1 has this problem
  • 2 views
more options

Greetings all...

I have a combination of MacOS Monterey, OpenSC 0.22.0 and a Cert Card/reader. I have the CA root imported and trusted for the cert card and the config works perfectly in Firefox v100 (sees my certs on the card, prompts for card login at startup of Firefox, etc)

In Thunderbird it doesn't work...in that Firefox will not accept the card based certs for S/MIME.

In Thunderbird I can see the card and reader under S/MIME Devices and I can login successfully to the card. In Manage S/MIME Certificates I can see my two card based certificates under "Your Certificates".

If I hit "Select" on either "Personal Certificate for digital signing" or "Personal certificate for encryption" Thunderbird tells me "Certificate Manager can't locate a valid certificate that can be used to digitally sign your messages with an address of <me@myemailaddress.tld>"

that's not my real email ;)

If I view the certificates my proper email address is listed and the card based certificates are shown with Key Usages of "Digital-Signature, Non-Repudiation" and Extended Key Usages of "Client Authentication, E-mail Protection, Smartcard Login"

This key card and driver (OpenSC) works perfectly on Firefox on this machine. Thunderbird doesn't like it. The Tools/Developer/Error Console shows no related errors.

What am I missing? Can anyone suggest what Thunderbird isn't liking here?

Many thanks!

--Jeff

Greetings all... I have a combination of MacOS Monterey, OpenSC 0.22.0 and a Cert Card/reader. I have the CA root imported and trusted for the cert card and the config works perfectly in Firefox v100 (sees my certs on the card, prompts for card login at startup of Firefox, etc) In Thunderbird it doesn't work...in that Firefox will not accept the card based certs for S/MIME. In Thunderbird I can see the card and reader under S/MIME Devices and I can login successfully to the card. In Manage S/MIME Certificates I can see my two card based certificates under "Your Certificates". If I hit "Select" on either "Personal Certificate for digital signing" or "Personal certificate for encryption" Thunderbird tells me "Certificate Manager can't locate a valid certificate that can be used to digitally sign your messages with an address of <me@myemailaddress.tld>" that's not my real email ;) If I view the certificates my proper email address is listed and the card based certificates are shown with Key Usages of "Digital-Signature, Non-Repudiation" and Extended Key Usages of "Client Authentication, E-mail Protection, Smartcard Login" This key card and driver (OpenSC) works perfectly on Firefox on this machine. Thunderbird doesn't like it. The Tools/Developer/Error Console shows no related errors. What am I missing? Can anyone suggest what Thunderbird isn't liking here? Many thanks! --Jeff