simple-smime-core team mailing list archive

[Christoph Meinhart <sib08022@xxxxxxxxxxxxxxx>]

hi!

i fixed the bug in the certficate creation thread, at least i think so - i 
created more than 6 certificates (in different bitlengths) without the bug 
occurring. since i did not recognize the bug in the first place, i would 
appreciate if you bother to test it too.

as mentioned by michael, import in thunderbird is not as easy as thought -- if 
you want to be able to sign a certificate, the root ca certificate has to be 
added and trusted. it is not done with just packing both into a pkcs12 
container -- thunderbird will add the root certificate without trusting it and 
so screws up the whole certificate system even denying you to add the 
certificate again, forcing you to delete it and readd it...

so we have to change the thunderbird private import slightly and export the 
ca-certificate too -- should not be too hard. i tried to change the code but it 
i cannot figure out how to do it best using the Export class in the gui. Do we 
really re-open and close the database for each private cert operation? this 
seems really odd... opening one time on start and closing on exit should be 
far enough :D

until tomorrow,
nurio