Bug#703587: libnss3 update disables some (self signed) certs (with Icedove)

2013-03-25 Thread Philonous Atio
On Sun, 24 Mar 2013 22:00:17 -0400, Daniel Kahn Gillmor wrote: can you give more details about your platform and the version used? I am running Debian Wheezy with Xfce (fully up to date as of 23 Mar 2013) software on a desktop computer with an AMD Athlon 64 X2 3800+ processor, Asus A8N5X

Bug#703587: libnss3 update disables some (self signed) certs (with Icedove)

2013-03-25 Thread Philonous Atio
On Sun, 24 Mar 2013 01:41:34 -0400, Daniel Kahn Gillmor wrote: i think you should have the remote server's certificate loaded in your Servers tab, not in your Authorities tab. Perhaps my phrasing was not quite clear, but the remote server's certificate was NOT loaded into the Authorities

Bug#703587: libnss3 update disables some (self signed) certs (with Icedove)

2013-03-25 Thread Philonous Atio
On Sun, 24 Mar 2013 18:33:54 -0400, Daniel Kahn Gillmor wrote: In X.509, ... Thank you for the mini-tutorial on terminology. The certificates I am concerned about in this bug are regular EE certificates. Using MD5 for X.509 signatures of intermediate CAs and EE certificates has been a bad

Bug#703587: libnss3 update disables some (self signed) certs (with Icedove)

2013-03-23 Thread Philonous Atio
I had the same problem as Erik C.J. Laan, the original poster. My CA certificate is imported into the Authorities section of Icedove's certificates, but I have imported no other certificates. This setup has been working for a long time in Debian and it works on Thunderbird in Windows.