Michael Bell wrote, On 2009-01-21 04:12: > Michael Bell wrote: > >> I analysed the situation and discovered that the purpose of the cert >> on Windows is "Client, sign, encrypt" but the purpose on Linux is >> "<unknown>".
Can you see the actual contents of the cert itself inside FF's certificate manager window? If so, then the problem is probably with the cert itself and not with the smart card. >> I checked the cert with OpenSSL and noticed that the >> certificate does not include the usual nsCertType extensions. nsCertType extensions are not supported by most software and are deprecated. They have been superseded by other standardized extensions, such as the Key Usage and Extended Key Usage extensions. > Can I remove the cert from my certificates without removing it from my > smartcard? If the certificate appears in that tab even when the smart card is removed then yes, it can be removed from that tab, without removing it from the smart card, by deleting it while the smart card is not in the reader. > Perhaps icedove parsed the certifate in a wrong way and now > Thunderbird relies on the wrong cached data. Firefox/Thunderbird have only one way to parse a cert. I'd expect the same results each time. > I use the original Thunderbird now but I fear that the cert in my > cert8.db is associated with wrong cached data (purpose = "<unknown>"). Is the cert on your smart card? Or is it in the software module? FF/TB have a built-in pure-software emulator of a smart card. It uses the cert8.db file. It's an alternative to your smart card. Normally, certs in your smart card do not get copied to the cert8.db file. If your cert has somehow been copied to the cert8.db file, you can delete it from there. The safest way to do so is with the smart card removed from the reader. I suggest you back up your cert and key DB files before doing any of this. > Best regards > > Michael _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
