Ko tenda hembiapoite sa’ivéta oñemba’apokuévo hese hembiapo porãve hag̃ua. Peteĩ jehaipyre nomoĩporãiramo ne apañuái ha eporanduséramo, roguerekohína ore nepytyvõ rekoha ikatútava ndeykeko @FirefoxSupport Twitter-pe ha avei /r/firefox Reddit-pe.

Avatar for Username

Eheka Pytyvõha

Emboyke pytyvõha apovai. Ndorojeruremo’ãi ehenói térã eñe’ẽmondóvo pumbyrýpe ha emoherakuãvo marandu nemba’etéva. Emombe’u tembiapo imarãkuaáva ko “Marandu iñañáva” rupive.

Kuaave

Ko téma oñeñongatúma. Ejapo porandu pyahu eikotevẽramo pytyvõ.

How can I override the restriction on the email address of a PKI signing certificate matching the mail account?

  • 2 Mbohovái
  • 1 oguereko ko apañuái
  • 1 Hecha
  • Mbohovái ipaháva manchesterj

manchesterj
manchesterj
more options

I have used Thunderbird successfully to access multiple mails accounts; one individual mail account, the others are used by multiple people.

I use PKI certificates to send signed emails. My PKI certificates all have the email address of my individual mail account. In the past, I have been able to send signed emails with those certificates from other mail accounts. (The recipient will see the signature as questionable, but can examine the signing certificate to determine the authenticity of the sender.)

Thunderbird is not allowing me to select a certificate unless the email address in the certificate matches the email address of the mail account. Is there any way to override this?

I have used Thunderbird successfully to access multiple mails accounts; one individual mail account, the others are used by multiple people. I use PKI certificates to send signed emails. My PKI certificates all have the email address of my individual mail account. In the past, I have been able to send signed emails with those certificates from other mail accounts. (The recipient will see the signature as questionable, but can examine the signing certificate to determine the authenticity of the sender.) Thunderbird is not allowing me to select a certificate unless the email address in the certificate matches the email address of the mail account. Is there any way to override this?

Opaite Mbohovái (2)

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

I would be rather disappointed if there was a way to over ride it. Sounds to me like someone has fixed a bug.

manchesterj
manchesterj Porandu apoha
more options

I disagree. It would only be a bug if the person receiving the email did not clearly see an indication that the signature on the email is "invalid" (or at least 'suspect'). But recipients do see that indication.

Mozilla actually makes a habit of allowing for people to override security constraints. (Usually in that config file.)