I recently obtained a digital certificate for use with S/MIME. I followed the process laid out in
https://support.mozilla.org/en-US/kb/instructions-smime-certificate-usi… (czytaj dalej)
I recently obtained a digital certificate for use with S/MIME. I followed the process laid out in
https://support.mozilla.org/en-US/kb/instructions-smime-certificate-using-csr
to generate my key pair, create a CSR, submit it to a CA, download the resulting certificate file, and import it into Thunderbird. I also imported the intermediate certificate showed as the issuer for my cert, which in turn appears to be signed by one of the certs trusted by default in Thunderbird.
Having done that, I see the certificate showing up under "your certificates" in the Certificate Manager, with a "not before" date in the past and a "not after" date in the future. So everything appears to look correct, but when I try to send a signed email I get the following error message as a pop-up:
"Sending of the message failed.
You specified that this message should be digitally signed, but the application either failed to find the signing certificate specified in your Mail & Newsgroup Account Settings, or the certificate has expired."
And if I look at the console in developer tools I see:
"mailnews.send: NS_ERROR_FAILURE: Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIMsgComposeSecure.beginCryptoEncapsulation]
_startCryptoEncapsulation resource:///modules/MimeMessage.sys.mjs:488
_writePart resource:///modules/MimeMessage.sys.mjs:536
createMessageFile resource:///modules/MimeMessage.sys.mjs:82
createAndSendMessage resource:///modules/MessageSend.sys.mjs:147
CompleteGenericSendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6456
GenericSendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6372
SendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6984
doCommand chrome://messenger/content/messengercompose/MsgComposeCommands.js:1085
doCommand chrome://messenger/content/messengercompose/MsgComposeCommands.js:1263
goDoCommand chrome://messenger/content/globalOverlay.js:99
oncommand chrome://messenger/content/messengercompose/messengercompose.xhtml:1
openWindowPrompt resource:///actors/PromptParent.sys.mjs:75
receiveMessage resource:///actors/PromptParent.sys.mjs:18
openPrompt resource://gre/modules/Prompter.sys.mjs:1228
openPromptSync resource://gre/modules/Prompter.sys.mjs:1071
alert resource://gre/modules/Prompter.sys.mjs:1375
alert resource://gre/modules/Prompter.sys.mjs:78
fail resource:///modules/MessageSend.sys.mjs:358
createAndSendMessage resource:///modules/MessageSend.sys.mjs:157
MessageSend.sys.mjs:149:32
createAndSendMessage resource:///modules/MessageSend.sys.mjs:149
CompleteGenericSendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6456
GenericSendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6372
SendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6984
doCommand chrome://messenger/content/messengercompose/MsgComposeCommands.js:1085
doCommand chrome://messenger/content/messengercompose/MsgComposeCommands.js:1263
goDoCommand chrome://messenger/content/globalOverlay.js:99
oncommand chrome://messenger/content/messengercompose/messengercompose.xhtml:1
openWindowPrompt resource:///actors/PromptParent.sys.mjs:75
receiveMessage resource:///actors/PromptParent.sys.mjs:18
openPrompt resource://gre/modules/Prompter.sys.mjs:1228
openPromptSync resource://gre/modules/Prompter.sys.mjs:1071
alert resource://gre/modules/Prompter.sys.mjs:1375
alert resource://gre/modules/Prompter.sys.mjs:78
fail resource:///modules/MessageSend.sys.mjs:358
createAndSendMessage resource:///modules/MessageSend.sys.mjs:157"
I can't make sense of the error message, since the certificate appears under "your certificates" in the certificate manager, and it does not appear to be expired. Can anyone suggest how to determine the root cause and fix it? Does it matter that the certificate is for a non-default identify I've added for the account in Thunderbird? Does it matter if the "common name" in the certificate doesn't match the "Your Name" field in Thunderbird? Any pointers on what to check would be appreciated.