We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

My certificate imported, but Certificate Manager can't locate it. Why?

  • 9 个回答
  • 2 人有此问题
  • 1 次查看
  • 最后回复者为 Faraway17

more options

A certificate without * <customdomain.com> has been imported to Thunderbird via Preference and it's visible, but when going to Security -> Digital Signing -> Select (Certificate) it states "Certificate Manager can't locate a valid certificate that can be used to digitally sign your messages". Why?

A certificate without * <customdomain.com> has been imported to Thunderbird via Preference and it's visible, but when going to Security -> Digital Signing -> Select (Certificate) it states "Certificate Manager can't locate a valid certificate that can be used to digitally sign your messages". Why?

所有回复 (9)

more options
My certificate imported

Where did you import it to? If this is a personal certificate it should go into the 'Your Certificates' tab.

more options

of course. Thunderbird doesn't seem to locate it even if it's been imported to "Your Certificates" and it has the same name and email(both in crt and account).

more options

Did you import the cert and the private key?

more options

christ1 said

Did you import the cert and the private key?

Do you mean combining public and private key into a single crt file?

more options

Something like that.

more options

Yes I did, in fact it automatically merges both public and private keys to some_file.pk12 file when using "openssl pkcs12" utility. I checked the content of pk12 file and it has both keys

more options

I think the problem was being caused by the way how FQDN name was assigned to my certificate. Although I applied for <customdomain.com> certificate (without www or other subdomains), the certificate issuer released the certificate(by default) under <www.customdomain.com>(which is a subdomain). So in order for Thunderbird Certificate manager to locate a valid certificate the email should have been something similar to <name@www.customdomain.com>.

more options

Are you saying it is working now?

more options

I will try it once I get my certificate reissued.

p.s: Sorry for delay. I was in a travel :)