This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Thunderbird Encrypting Email can't find Encryption Certificate on Linux Version 102.10.0 (64-bit)

  • 1 reply
  • 1 has this problem
  • 22 views
  • Last reply by mishra771

mishra771
mishra771
more options

I recently updated my Thunderbird on Linux to 102.10.0 via Centos 7 Yum. Now for certain email addresses I am unable to send encrypted email. Thunderbird says: "Sending of the message failed. You specified encryption for this message, but the application failed to find an encryption certificate for xxx@xxx.xxx" However, I can see via the Account Settings and People certs that those Certs exists and are valid. Also, via command line reading the cert9.db and key4.db, the Cert for those users exist:

Certificate: 

   Data:
       Version: 3 (0x2)
       Serial Number: 363175 (0x58aa7)
       Signature Algorithm: PKCS #1 SHA-256 With RSA Encryption
       Issuer: "CN=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXC=US"
       Validity:
           Not Before: Thu Jul 07 00:00:00 2022
           Not After : Sun Jul 06 23:59:59 2025
       Subject: "CN=XXX@XXX.XXX - OU=XXX, OU=XXX, O=XXX

Anyhow, I noticed that the cert8.db and key3.db had older entries, and I move that file to a backup folder so Thunderbird is only using cert9.db and key4.db. Again, the cert exists and Thunderbird sees it with the GUI. I didn't have this problem previously. I did obviously try keeping the cert8.db and key3.db along with cert9.db and key4.db in the Thunderbird dir, but again, it appears Thunderbird has moved on to using cert9.db and key4db. Some users with Valid Certs work for sending encrypted emails and some users do not. BTW: The intermediate signing and root signing certs are all trusted.

Also, for this new Version, when I run the GUI Tool/Tab from Thunderbird -> Security -> View Certificates of Recipients the output shows Not found for any users, even for the users who I am able send an encrypted email to (like myself). I can send myself an encrypted email, but tool output shows as Status "Not Found" for even my own cert even though I can send an encrypted email and read the encrypted email to myself via Thunderbird.

Please advise.

Thanks in advance!

I recently updated my Thunderbird on Linux to 102.10.0 via Centos 7 Yum. Now for certain email addresses I am unable to send encrypted email. Thunderbird says: "Sending of the message failed. You specified encryption for this message, but the application failed to find an encryption certificate for xxx@xxx.xxx" However, I can see via the Account Settings and People certs that those Certs exists and are valid. Also, via command line reading the cert9.db and key4.db, the Cert for those users exist: Certificate: Data: Version: 3 (0x2) Serial Number: 363175 (0x58aa7) Signature Algorithm: PKCS #1 SHA-256 With RSA Encryption Issuer: "CN=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXC=US" Validity: Not Before: Thu Jul 07 00:00:00 2022 Not After : Sun Jul 06 23:59:59 2025 Subject: "CN=XXX@XXX.XXX - OU=XXX, OU=XXX, O=XXX Anyhow, I noticed that the cert8.db and key3.db had older entries, and I move that file to a backup folder so Thunderbird is only using cert9.db and key4.db. Again, the cert exists and Thunderbird sees it with the GUI. I didn't have this problem previously. I did obviously try keeping the cert8.db and key3.db along with cert9.db and key4.db in the Thunderbird dir, but again, it appears Thunderbird has moved on to using cert9.db and key4db. Some users with Valid Certs work for sending encrypted emails and some users do not. BTW: The intermediate signing and root signing certs are all trusted. Also, for this new Version, when I run the GUI Tool/Tab from Thunderbird -> Security -> View Certificates of Recipients the output shows Not found for any users, even for the users who I am able send an encrypted email to (like myself). I can send myself an encrypted email, but tool output shows as Status "Not Found" for even my own cert even though I can send an encrypted email and read the encrypted email to myself via Thunderbird. Please advise. Thanks in advance!

All Replies (1)

mishra771
mishra771 Question owner
more options

One more item, I am also able to manually import the Public Cert for any user. I have tried deleting their cert and manually adding them. They show up in the GUI and command line via the certutil command , but it still does not help.

V/R