Thunderbird 140.15.0esr does not find a manually imported S/MIME recipient certificate although it is correctly displayed under “People” in the Certificate Manager.
I am trying to send an S/MIME encrypted email from Thunderbird to:
jobcenter-chemnitz.netzwerkpartner@jobcenter-ge.de
The recipient certificate is provided by the official certificate directory of the German Federal Employment Agency (Bundesagentur für Arbeit).
I downloaded the recipient certificate and successfully imported it into Thunderbird under:
Settings → Privacy & Security → Certificates → Manage Certificates → People
The certificate is displayed correctly there. The email address contained in the certificate is:
jobcenter-chemnitz.netzwerkpartner@jobcenter-ge.de
The certificate is valid from July 29, 2026 to July 29, 2028 and includes E-mail Protection and Key Encipherment.
The required CA certificates are also installed:
BA-Class-1-Root-CA-4:PN BA-VPS-CA-11:PN
However, when I compose an encrypted email to this exact address, Thunderbird reports:
“You have selected to encrypt this message, but the application failed to find an encryption certificate for jobcenter-chemnitz.netzwerkpartner@jobcenter-ge.de.”
Under S/MIME → Recipient Certificates, Thunderbird also shows the certificate as “Not found”.
I have already tried:
deleting and re-importing the recipient certificate completely restarting Thunderbird after importing it manually typing the recipient address in lowercase without using autocomplete checking the complete CA certificate chain temporarily disabling OCSP
None of these changed the result.
My own personal S/MIME certificate works correctly. As a test, I can compose an encrypted email to my own email address without any certificate error. Therefore, the basic S/MIME configuration and my own certificate appear to be working.
When I reproduce the problem with the Thunderbird Error Console open, I get:
NS_ERROR_ILLEGAL_VALUE (0x80070057)
related to:
nsIMsgComposeSecure.beginCryptoEncapsulation
This seems similar to Mozilla Bug 2021265, where a manually imported recipient certificate is visible in Certificate Manager but is not found when composing an encrypted message.
Is this a known issue in Thunderbird 140 ESR, and is there a workaround for using this manually imported recipient certificate?
การตอบกลับทั้งหมด (1)
I am following up on this issue, as I have not received any replies yet and the problem still persists.
Thunderbird 140.15.0esr still does not recognize the manually imported recipient S/MIME certificate when composing an encrypted email, although the certificate is correctly displayed under “People” in the Certificate Manager and appears to be valid.
My own S/MIME certificate works correctly, so S/MIME encryption itself is working in Thunderbird. The problem seems to be specifically that Thunderbird does not use the imported recipient certificate.
I would be very grateful if someone could help me determine whether this is a known issue in Thunderbird 140 ESR or whether there is another diagnostic step I can try.
In particular, I would appreciate any advice on the `NS_ERROR_ILLEGAL_VALUE (0x80070057)` error from `nsIMsgComposeSecure.beginCryptoEncapsulation`.
Thank you very much for any help.
You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.