This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Can't download outlook.office365.com mail. Thunderbird 102 / POP3/ OAuth2: `NS_ERROR_FAILURE: Couln't decrypt string`.

  • 3 replies
  • 1 has this problem
  • 10 views
  • Last reply by Gabriel

more options

Thunderbird 102.6.1 (64-bit) on Windows 10 machine

I cannot download my mail (POP3) from University server (outlook.office365.com, port 995) configured with SSL/TLS and OAuth2 after changing the password. Note that I could download my mail without problem before the password change. Now, when I click on the Get Email, I see "Host contacted, sending login information ...".

On the Error console, I see a series of `NS_ERROR_FAILURE: Couln't decrypt string`.

I have tried:

  • TB as allowed app in windows firewall
  • Deleting saved passwords. This leads to TB to show windows for credentials. After entering the new password, the windows disappear and we are back to the above problem.
  • If I enter a wrong password, I am asked to enter the correct one. After entering the correct password, I think that a token is successveli retrieved because of the line in the error console: `15:57:55.730 XHRPOSThttps://login.microsoftonline.com/common/oauth2/v2.0/token [HTTP/1.1 200 OK 438ms]`.
  • Note that in the error console, this message NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name]` appear.
  • Deleting cert9.dn, key4.db, xulstore.json, logins.json in profile does not help.

Error console transcript:

15:57:25.762 addFolderIconToElement() Component returned failure code: 0x80070057 (NS_ERROR_ILLEGAL_VALUE) [nsIMsgFolder.getStringProperty] ?:132 15:57:32.705 NS_ERROR_FAILURE: Couldn't decrypt string crypto-SDR.js:200

   decrypt resource://gre/modules/crypto-SDR.js:200
   _decryptLogins resource://gre/modules/storage-json.js:846
   findLogins resource://gre/modules/storage-json.js:705
   findLogins resource://gre/modules/LoginManager.jsm:513
   get refreshToken resource:///modules/OAuth2Module.jsm:122
   get resource:///modules/OAuth2Module.jsm:112
   connect resource:///modules/OAuth2.jsm:74
   onPromptAuthAvailable resource:///modules/OAuth2Module.jsm:182
   onPromptStartAsync resource:///modules/OAuth2Module.jsm:178
   _promiseAuthPrompt resource:///modules/MsgAsyncPrompter.jsm:54
   _promiseAuthPrompt resource:///modules/MsgAsyncPrompter.jsm:52
   run resource:///modules/MsgAsyncPrompter.jsm:77
   AsyncFunctionNext self-hosted:632

15:57:33.185 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] 3 OAuth2.jsm:171

   onStateChange resource:///modules/OAuth2.jsm:171

15:57:33.728 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] 2 OAuth2.jsm:171

   onStateChange resource:///modules/OAuth2.jsm:171

15:57:34.038 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] OAuth2.jsm:171

   onStateChange resource:///modules/OAuth2.jsm:171

15:57:52.598 Not showing popup notification password with the message Save login for hsr.it? browserRequest.js:12:13 15:57:52.599 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] OAuth2.jsm:171

   onStateChange resource:///modules/OAuth2.jsm:171

15:57:52.931 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] 2 OAuth2.jsm:171

   onStateChange resource:///modules/OAuth2.jsm:171

15:57:55.517 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] OAuth2.jsm:171

   onStateChange resource:///modules/OAuth2.jsm:171

15:57:55.730 XHRPOSThttps://login.microsoftonline.com/common/oauth2/v2.0/token [HTTP/1.1 200 OK 438ms] 15:57:55.752 Loading failed for the <script> with source “chrome://global/content/netError.js”. neterror:128:4 15:57:56.172 NS_ERROR_FAILURE: Couldn't decrypt string crypto-SDR.js:200

   decrypt resource://gre/modules/crypto-SDR.js:200
   _decryptLogins resource://gre/modules/storage-json.js:846
   findLogins resource://gre/modules/storage-json.js:705
   findLogins resource://gre/modules/LoginManager.jsm:513
   set refreshToken resource:///modules/OAuth2Module.jsm:136
   set resource:///modules/OAuth2Module.jsm:114
   requestAccessToken resource:///modules/OAuth2.jsm:289

15:57:56.175 NS_ERROR_FAILURE: Couldn't decrypt string crypto-SDR.js:200

   decrypt resource://gre/modules/crypto-SDR.js:200
   _decryptLogins resource://gre/modules/storage-json.js:846
   findLogins resource://gre/modules/storage-json.js:705
   findLogins resource://gre/modules/LoginManager.jsm:513
   addLogin resource://gre/modules/LoginManager.jsm:315
   set refreshToken resource:///modules/OAuth2Module.jsm:170
   set resource:///modules/OAuth2Module.jsm:114
   requestAccessToken resource:///modules/OAuth2.jsm:289

Thunderbird 102.6.1 (64-bit) on Windows 10 machine I cannot download my mail (POP3) from University server (outlook.office365.com, port 995) configured with SSL/TLS and OAuth2 after changing the password. Note that I could download my mail without problem before the password change. Now, when I click on the Get Email, I see "Host contacted, sending login information ...". On the Error console, I see a series of `NS_ERROR_FAILURE: Couln't decrypt string`. I have tried: * TB as allowed app in windows firewall * Deleting saved passwords. This leads to TB to show windows for credentials. After entering the new password, the windows disappear and we are back to the above problem. * If I enter a wrong password, I am asked to enter the correct one. After entering the correct password, I think that a token is successveli retrieved because of the line in the error console: `15:57:55.730 XHRPOSThttps://login.microsoftonline.com/common/oauth2/v2.0/token [HTTP/1.1 200 OK 438ms]`. * Note that in the error console, this message NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name]` appear. * Deleting cert9.dn, key4.db, xulstore.json, logins.json in profile does not help. Error console transcript: 15:57:25.762 addFolderIconToElement() Component returned failure code: 0x80070057 (NS_ERROR_ILLEGAL_VALUE) [nsIMsgFolder.getStringProperty] ?:132 15:57:32.705 NS_ERROR_FAILURE: Couldn't decrypt string crypto-SDR.js:200 decrypt resource://gre/modules/crypto-SDR.js:200 _decryptLogins resource://gre/modules/storage-json.js:846 findLogins resource://gre/modules/storage-json.js:705 findLogins resource://gre/modules/LoginManager.jsm:513 get refreshToken resource:///modules/OAuth2Module.jsm:122 get resource:///modules/OAuth2Module.jsm:112 connect resource:///modules/OAuth2.jsm:74 onPromptAuthAvailable resource:///modules/OAuth2Module.jsm:182 onPromptStartAsync resource:///modules/OAuth2Module.jsm:178 _promiseAuthPrompt resource:///modules/MsgAsyncPrompter.jsm:54 _promiseAuthPrompt resource:///modules/MsgAsyncPrompter.jsm:52 run resource:///modules/MsgAsyncPrompter.jsm:77 AsyncFunctionNext self-hosted:632 15:57:33.185 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] 3 OAuth2.jsm:171 onStateChange resource:///modules/OAuth2.jsm:171 15:57:33.728 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] 2 OAuth2.jsm:171 onStateChange resource:///modules/OAuth2.jsm:171 15:57:34.038 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] OAuth2.jsm:171 onStateChange resource:///modules/OAuth2.jsm:171 15:57:52.598 Not showing popup notification password with the message Save login for hsr.it? browserRequest.js:12:13 15:57:52.599 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] OAuth2.jsm:171 onStateChange resource:///modules/OAuth2.jsm:171 15:57:52.931 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] 2 OAuth2.jsm:171 onStateChange resource:///modules/OAuth2.jsm:171 15:57:55.517 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] OAuth2.jsm:171 onStateChange resource:///modules/OAuth2.jsm:171 15:57:55.730 XHRPOSThttps://login.microsoftonline.com/common/oauth2/v2.0/token [HTTP/1.1 200 OK 438ms] 15:57:55.752 Loading failed for the <script> with source “chrome://global/content/netError.js”. neterror:128:4 15:57:56.172 NS_ERROR_FAILURE: Couldn't decrypt string crypto-SDR.js:200 decrypt resource://gre/modules/crypto-SDR.js:200 _decryptLogins resource://gre/modules/storage-json.js:846 findLogins resource://gre/modules/storage-json.js:705 findLogins resource://gre/modules/LoginManager.jsm:513 set refreshToken resource:///modules/OAuth2Module.jsm:136 set resource:///modules/OAuth2Module.jsm:114 requestAccessToken resource:///modules/OAuth2.jsm:289 15:57:56.175 NS_ERROR_FAILURE: Couldn't decrypt string crypto-SDR.js:200 decrypt resource://gre/modules/crypto-SDR.js:200 _decryptLogins resource://gre/modules/storage-json.js:846 findLogins resource://gre/modules/storage-json.js:705 findLogins resource://gre/modules/LoginManager.jsm:513 addLogin resource://gre/modules/LoginManager.jsm:315 set refreshToken resource:///modules/OAuth2Module.jsm:170 set resource:///modules/OAuth2Module.jsm:114 requestAccessToken resource:///modules/OAuth2.jsm:289 ​

Modified by Wayne Mery

All Replies (3)

more options

Hmm do you have an anti virus that might be messing with SSL/TLS certificates. Avast and Kaspersky do this man in the middle hack I know using self signed certificates , others as well. If the certificate is being changed on the sly by the anti virus then a failure to decrypt would be something I would expect.

more options

Thank you for the reply because I did not find a solution yet. I have only Windows Security built-in virus protection but tunrning it off did not help. Please, help find me a solution and/how suggest steps to identify the issue better.

My account setup might be a bit unconventional because I transfered my profile from another machine and edited profiles.ini manually. It was working fine until I had to the change of password a week ago.

Here are my install.ini:

[D78BF5DD33499EC2] 
Default=Profiles/vqctlixl.default-release
Locked=1

and profiles.ini files:

[InstallD78BF5DD33499EC2]
Default=Profiles/gabriel
Locked=1

[Profile2]
Name=gabriel
IsRelative=1
Path=Profiles/gabriel
Default=1

[Profile1]
Name=default
IsRelative=1
Path=Profiles/fyzzvz0o.default

[Profile0]
Name=default-release
IsRelative=1
Path=Profiles/vqctlixl.default-release

[General]
StartWithLastProfile=1
Version=2

Only the Profiles/gabriel folder exists and contains all my profile. Is it ok? Should I try to create new account? How can I do it without messing up with previous downloaded mail?

Modified by Gabriel

more options

Help needed. I would like to understand why it is happening and how to fix it. I can't download my mail with TB. Thanks.