Re: Invalide certificate encoding crashing certutil [Re: Thunderbird: "Could not verify this certificate for unknown reasons"]

2010-10-29 Thread Matej Kurpel
On 29. 10. 2010 14:11, Nelson B Bolyard wrote: On 2010/10/28 02:14 PDT, Jean-Marc Desperrier wrote: Nelson B Bolyard wrote: Please don't file a bug without a stack trace showing the crash is in NSS. [...] If the back trace shows the crash is not in NSS, but in some other library, please direct

Re: Invalide certificate encoding crashing certutil [Re: Thunderbird: "Could not verify this certificate for unknown reasons"]

2010-10-29 Thread Nelson B Bolyard
On 2010/10/28 02:14 PDT, Jean-Marc Desperrier wrote: > Nelson B Bolyard wrote: >> Please don't file a bug without a stack trace showing the crash is in NSS. >> [...] >> If the back trace shows the crash is not in NSS, but in some other >> library, please direct the bug report accordingly. > > The

Re: Invalide certificate encoding crashing certutil [Re: Thunderbird: "Could not verify this certificate for unknown reasons"]

2010-10-28 Thread Matej Kurpel
On 28. 10. 2010 11:14, Jean-Marc Desperrier wrote: Nelson B Bolyard wrote: Please don't file a bug without a stack trace showing the crash is in NSS. [...] If the back trace shows the crash is not in NSS, but in some other library, please direct the bug report accordingly. The report is that

Re: Invalide certificate encoding crashing certutil [Re: Thunderbird: "Could not verify this certificate for unknown reasons"]

2010-10-28 Thread Jean-Marc Desperrier
Nelson B Bolyard wrote: Please don't file a bug without a stack trace showing the crash is in NSS. [...] If the back trace shows the crash is not in NSS, but in some other library, please direct the bug report accordingly. The report is that the crashs is inside NSS's certutil, Nelson. As Thun

Re: Invalide certificate encoding crashing certutil [Re: Thunderbird: "Could not verify this certificate for unknown reasons"]

2010-10-26 Thread Nelson B Bolyard
On 2010-10-26 05:07 PDT, Jean-Marc Desperrier wrote: > Matej Kurpel wrote: >> However, how does a printable string differ from utf8string (and other >> strings, particularly ia5string) when there are no non-ascii characters? >> Do you think it's a bug in NSS...? > > printable string basically allo

Re: Invalide certificate encoding crashing certutil [Re: Thunderbird: "Could not verify this certificate for unknown reasons"]

2010-10-26 Thread Jean-Marc Desperrier
Matej Kurpel wrote: However, how does a printable string differ from utf8string (and other strings, particularly ia5string) when there are no non-ascii characters? Do you think it's a bug in NSS...? printable string basically allows only the alphabet and numeric characters. ia5string allows al

Re: Invalide certificate encoding crashing certutil [Re: Thunderbird: "Could not verify this certificate for unknown reasons"]

2010-10-26 Thread Matej Kurpel
On 26. 10. 2010 10:43, Jean-Marc Desperrier wrote: Matej Kurpel wrote: In the Type field for S:, O:, OU: and CN: I always provided 0x0c which is utf-8 string, but in the certificate there was 0x13 - printable string. After I changed it - voila, it's working in Thunderbird, and certutil doesn't c

Invalide certificate encoding crashing certutil [Re: Thunderbird: "Could not verify this certificate for unknown reasons"]

2010-10-26 Thread Jean-Marc Desperrier
Matej Kurpel wrote: In the Type field for S:, O:, OU: and CN: I always provided 0x0c which is utf-8 string, but in the certificate there was 0x13 - printable string. After I changed it - voila, it's working in Thunderbird, and certutil doesn't crash anymore. It sounds like a serious bug. Could

Re: Thunderbird: "Could not verify this certificate for unknown reasons"

2010-10-25 Thread Matej Kurpel
On 25. 10. 2010 12:16, Matej Kurpel wrote: On 24. 10. 2010 20:59, Nelson B Bolyard wrote: On 2010-10-24 02:12 PDT, Matej Kurpel wrote: [snip] You can clearly see both my CA and user certificates. Certutil has used my PKCS#11 module to obtain my user certificate. Then I launched the second comma

Re: Thunderbird: "Could not verify this certificate for unknown reasons"

2010-10-25 Thread Matej Kurpel
On 24. 10. 2010 20:59, Nelson B Bolyard wrote: On 2010-10-24 02:12 PDT, Matej Kurpel wrote: [snip] You can clearly see both my CA and user certificates. Certutil has used my PKCS#11 module to obtain my user certificate. Then I launched the second commany you were suggesting: certutil -d . -L -n

Re: Thunderbird: "Could not verify this certificate for unknown reasons"

2010-10-24 Thread Nelson B Bolyard
On 2010-10-24 02:12 PDT, Matej Kurpel wrote: [snip] > You can clearly see both my CA and user certificates. Certutil has used > my PKCS#11 module to obtain my user certificate. Then I launched the > second commany you were suggesting: > > certutil -d . -L -n "HTC Touch HD T8282:Matej Kurpel" >

Re: Thunderbird: "Could not verify this certificate for unknown reasons"

2010-10-24 Thread Matej Kurpel
On 23. 10. 2010 22:18, Nelson B Bolyard wrote: On 2010-10-21 13:31 PDT, Matej Kurpel wrote: This looks like Thunderbird cannot find the user certificate in its database. Well, it shouldn't anyway, since it resides on the token provided by a PKCS#11 module I am developing. Right. It's not nece

Re: Thunderbird: "Could not verify this certificate for unknown reasons"

2010-10-23 Thread Nelson B Bolyard
On 2010-10-21 13:31 PDT, Matej Kurpel wrote: > This looks like Thunderbird cannot find the user certificate in its > database. Well, it shouldn't anyway, since it resides on the token > provided by a PKCS#11 module I am developing. Right. It's not necessary for the cert to be in the database.

Re: Thunderbird: "Could not verify this certificate for unknown reasons"

2010-10-21 Thread Matej Kurpel
On 20. 10. 2010 21:01, Nelson B Bolyard wrote: On 2010-10-20 09:54 PDT, Matej Kurpel wrote: Hello, I have set up my own CA and issued one certificate signed by this CA. However, I cannot use this certificate to send signed e-mail from Thunderbird. It says "Could not verify this certificate for u

Re: Thunderbird: "Could not verify this certificate for unknown reasons"

2010-10-20 Thread Nelson B Bolyard
On 2010-10-20 09:54 PDT, Matej Kurpel wrote: > Hello, > I have set up my own CA and issued one certificate signed by this CA. > However, I cannot use this certificate to send signed e-mail from > Thunderbird. It says "Could not verify this certificate for unknown > reasons". PSM's infamous "fo

Thunderbird: "Could not verify this certificate for unknown reasons"

2010-10-20 Thread Matej Kurpel
Hello, I have set up my own CA and issued one certificate signed by this CA. However, I cannot use this certificate to send signed e-mail from Thunderbird. It says "Could not verify this certificate for unknown reasons". I don't understand; I have added the root CA certificate into the Authori