undefined | Better HN

0 pointsthrowanem5y ago0 comments

Try adding the root CA cert you created to sign the self-signed cert to whatever certificate trust store Thunderbird uses on your system, maybe? It's been a while since I had to deal with this on any OS so I can't give specific advice on how to do it, but generally my experience has been that this is a good first step in resolving trust failures with self-signed certificates.

0 comments

2 comments · 1 top-level

janwillemb5y ago· 1 in thread

I tried that (I've done this many times because of local development of APIs), but Thunderbird doesn't seem to use this. Or: it is another problem, but Thunderbird doesn't give any helpful message.

throwanemOP5y ago

Ah, it looks like Tbird uses its own cert store, maybe. https://manuals.gfi.com/en/kerio/connect/content/server-conf... describes a pretty unique process for manually applying a trust exception to an arbitrary server cert - maybe worth a try if you didn't know about it, as I also did not until five minutes ago despite having used Thunderbird for what must now be a couple of decades.

j / k navigate · click thread line to collapse