Some more informations about experiments with the certificate: I tried to use the "certutil" program to check the certificate (Ubuntu/Debian: Part of the libnss3-tools package).
It turns out that certutil is able to verify this Intel CA 4A certificate. I tried this on different systems, which (as far as I can tell) use the following NSS libraries: * libnss 3.15 (Ubuntu 14.04) * libnss 3.21 (some SUSE Linux) * libnss 3.26 (Debian Jessie) For all these systems certutil is able to verify the mentioned Intel Certificate. Now I know that Thunderbird comes with its own set of libnss libraries; so maybe something is different in these libraries. But I have no clue what might be different... so long Ingo -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to thunderbird in Ubuntu. https://bugs.launchpad.net/bugs/1661709 Title: Could not verify certificate Status in thunderbird package in Ubuntu: New Bug description: Hello, I use Thunderbird 52.0b1 (64-bit), for Ubuntu 14.04 from ppa:mozillateam/thunderbird-next I have a Certificate from an Intel CA : Issuer: CN = AddTrust External CA Root OU = AddTrust External TTP Network O = AddTrust AB C = SE Issued To: CN = Intel External Basic Issuing CA 4A O = Intel Corporation Now if I use the certificate manager and I find this certificate under "Authorities" under the "AddTrust AB" entry as "Intel External Basic Issuing CA 4A" Now if I select this certificate and click on "View...", Thunderbird reports: "Could not verify this certificate for unknown reasons." This in itself would not be a problem. The real problem is, that I am not able to send encrypted S/MIME E-Mail to any people which have an E-Mail certificate signed by this "Intel External Basic CA 4A" Authority. Unfortunately I have no clue how debug this issue, since there is no log or more detailed error what exactly the problem is. From inspecting the certificate everything seems to be ok. Can someone please have a look what exactly the issue might be ? Any hints how to debug this problem are also welcome. I attach the certificate in question "intel_external_ca_4a.crt" You can import this certificate via the certificate manager. - Select Authorities. - Click "Import..." - Select the file "intel_external_ca_4a.crt" so long Ingo Note: This issue also is present for Thunderbird 45.7 If I use Thunderbird 24.6 the certificate also cannot be verified, but I am still able to send E-Mail to people who use this certificate... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/1661709/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
