[Bug 1661709] Re: Could not verify certificate
[Expired for thunderbird (Ubuntu) because there has been no activity for 60 days.] ** Changed in: thunderbird (Ubuntu) Status: Incomplete => Expired -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1661709 Title: Could not verify certificate To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/1661709/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1661709] Re: Could not verify certificate
Hello Lundril-p, Thank you for submitting this bug and reporting a problem with cerrificates in Thunderbird. You made this bug report over a year ago and there have been several versions of Ubuntu and Thunderbird since then. Could you confirm that this is no longer a problem and that we can close the ticket? If it is still a problem, are you still interested in finding a solution to this bug? If you are, could you run the following (only once): apport-collect BUGNUMBER and upload the updated logs and and any other logs that are relevant for this particular issue. Thank you again for helping make Ubuntu and Thunderbird better. G ** Changed in: thunderbird (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1661709 Title: Could not verify certificate To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/1661709/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1661709] Re: Could not verify certificate
And here some more information what is known about this Intel Certificate. >From certwatch.comodo.com: https://certwatch.comodo.com/?caid=14407 Note this website says that this certificate is "constrained" for Mozilla / NSS 3.28, but I have no clue what that means... Direclty by ID: https://certwatch.comodo.com/?id=12729343 >From there: CA/B Forum lint reports: INFO: CA certificate identified INFO: No checks for OtherName type 1.3.6.1.4.1.311.20.2.3 X.509 lint reports: WARNING: Unknown extended key usage But again this does not seem to be that wrong ? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1661709 Title: Could not verify certificate To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/1661709/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1661709] Re: Could not verify certificate
Some more informations about experiments with the certificate: I tried to use the "certutil" program to check the certificate (Ubuntu/Debian: Part of the libnss3-tools package). It turns out that certutil is able to verify this Intel CA 4A certificate. I tried this on different systems, which (as far as I can tell) use the following NSS libraries: * libnss 3.15 (Ubuntu 14.04) * libnss 3.21 (some SUSE Linux) * libnss 3.26 (Debian Jessie) For all these systems certutil is able to verify the mentioned Intel Certificate. Now I know that Thunderbird comes with its own set of libnss libraries; so maybe something is different in these libraries. But I have no clue what might be different... so long Ingo -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1661709 Title: Could not verify certificate To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/1661709/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1661709] Re: Could not verify certificate
Note: If you install this certificate in 50.1.0, firefox is also not able to verify this certificate. Guess: It has something to do with the NSS libraries... -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1661709 Title: Could not verify certificate To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/1661709/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
