Michael Bell wrote: > Michael Bell wrote: > >> I analysed the situation and discovered that the purpose of the cert >> on Windows is "Client, sign, encrypt" but the purpose on Linux is >> "<unknown>". I checked the cert with OpenSSL and noticed that the >> certificate does not include the usual nsCertType extensions. > > Can I remove the cert from my certificates without removing it from my > smartcard? Perhaps icedove parsed the certifate in a wrong way and now > Thunderbird relies on the wrong cached data. > > I use the original Thunderbird now but I fear that the cert in my > cert8.db is associated with wrong cached data (purpose = "<unknown>").
Okay, I removed my Thunderbird config and started from scratch. The behaviour does not change. How does Thunderbird determine the purpose? Does it parse the extensions or does it query the PKCS#11 token? Best regards Michael _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto