You are here

Digital Signature for TB Portable?

6 posts / 0 new
Last post
peki1
peki1's picture
Offline
Last seen: 14 years 11 months ago
Joined: 2008-12-29 05:37
Digital Signature for TB Portable?

Hi,

Does enybody know about the plugin for TB Portable enablig diditally sign e-mail with PKSC12 certificate?

Thanks

Petr

ottosykora
Offline
Last seen: 2 days 17 hours ago
Joined: 2007-10-11 17:48
it does it

simply, no plugin or similar, it is included.
You have to import the certs however, under options, advanced, certificates.

If you have complete keypair imported, then when you are in compose mew message, then under options, security, you can choose to sign, encrypt etc. For encryption you need the public cert of the correspondence prtner thought, for sig your full key pair, that means private key has to be present. All normal standards of 509 key formates are importable.

Otto Sykora
Basel, Switzerland

peki1
peki1's picture
Offline
Last seen: 14 years 11 months ago
Joined: 2008-12-29 05:37
i foud it

Hi Otto,

Thanks for the responce, I found it, It somewhat works even with my Eutron Cryptoidentity 2048 token, only have a problem with the verification of the certificates. The same Verisiggn issued certificate in Firefox is easy verified but in the TB it is not veryfying. Posibble bug?

Petr

-pp-

ottosykora
Offline
Last seen: 2 days 17 hours ago
Joined: 2007-10-11 17:48
definitely not

but rather incomplete cert chain (need the root cert etc too) or more likely the message was modified underway. This happens many times, servers do this and that to the messages, trim lines, add spaces etc.
Try all with plain text instead of html text, it could work better.

Otto Sykora
Basel, Switzerland

peki1
peki1's picture
Offline
Last seen: 14 years 11 months ago
Joined: 2008-12-29 05:37
CA cert issue

Tanks for reply, I have found that the problem was in missing the right Type of Cert Authority in autorities certificates. There was plenty of Verisign type certs but the one needed was not. I have exportet the correct Root Verisign type (private G2)
from mozilla Firefox and imported it into the Thunderbird and since then it is my private certificate issued by Verisign is displayed as verified correctly.

-pp-

-pp-

ottosykora
Offline
Last seen: 2 days 17 hours ago
Joined: 2007-10-11 17:48
aha!

this was what I meant by incomplete chain.

The commercial certs have sometimes so long of tree of certs that one can be often missing and the whole fun is broken.

Otto Sykora
Basel, Switzerland

Log in or register to post comments