Because I have a need foor signing en encrypting my mail, I would like to import a PKCS 12 keypair (*.p12 or *.pfx) into my Certificate manager.
But when importing the keypair, i receive the following error:
"the pkcs #12 operation failed for unknown reasons"
Importing the same keypair file in the non-portable edition of thunderbird succeeds.
Does anyone have experince with that?
Is there a bug-tracker available?
Peter
Visit the Community page
Join our forums
Subscribe to our email newsletter
Subscribe with RSS
Follow us on Facebook
Follow us on LinkedIn
Follow us on Twitter
Follow us on Mastodon
Follow us on BlueSky
I've imported PKS12 certs twice, once a few weeks ago, and a different one just now. Behaved normally. Thunderbird v2.0.0.9
You've probably done the usual troubleshooting, like checking for space on the drive... any other differences from a normal install? An unusual number or type of accounts? Plugins installed? Changes you made to the config?
MC
Strange, as far as I know I have a default installation with no plugins, enough diskspace but I'm using 3 accounts....all of type POP3
And after some more testing....it appears that some PKS12 certs always give this problem and others do not (they install without problems).
I've tested the 'problem' certs with other clients like windows but also the non-portable thunderbird, and they give no problems at all.
Is there a way to debug the certificate import procedure?
Well, a couple more questions: are the certs that fail from the same CA as those that work? Which ones fail (if it isn't confidential)?
Is there any difference in the CA root setup between the working and non-working install? Are you sure the root and intermediate for the failing certs are the same between the two machines?
Can you reproduce the problem with a no-cost email cert like Comodo or CAcert or JamesHoward.us or Thawte? Maybe if the problem can be replicated on another machine by someone who knows Thunderbird a bit better, we could approach a solution.
Oh, on a fresh or "test" install, can you copy over the profile from the local install and see if the working cert comes along with it?
MC
I did a fresh install of my thunderbird portable on a new USB device.
Configuring only one POP3 account, I was able to import the pkcs12 file that failed on my other instance.
Since I've no options on debugging the stuff or tracing any logfiles, My journey stops here.