Avatar for Username

Pomoc pśepytaś

Glědajśo se wobšudy pomocy. Njenapominajomy was nigda, telefonowy numer zawołaś, SMS pósłaś abo wósobinske informacije pśeraźiś. Pšosym dajśo suspektnu aktiwitu z pomocu nastajenja „Znjewužywanje k wěsći daś“ k wěsći.

Dalšne informacije

Toś ta nitka jo se archiwěrowała. Pšosym stajśo nowe pšašanje, joli trjebaśo pomoc.

S/MIME and trusting other certificates

  • 2 wótegronje
  • 1 ma toś ten problem
  • 3 naglědy
  • Slědne wótegrono wót alan158

alan158
alan158
more options

I am trying to get S/MIME set up properly. I have my personal certificate set up and installed - I can send signed messages. However, when I try to send an ecrypted message to a recipent with a DOD certificate, I run into an error that the certificate is not valid. I have installed the DOD root certificates, trusted them for email/websites, and imported the individual's signature cert into the store.

How do I change the settings / trust on the individual's certificate to trust it? It is within the valid date range.

I am trying to get S/MIME set up properly. I have my personal certificate set up and installed - I can send signed messages. However, when I try to send an ecrypted message to a recipent with a DOD certificate, I run into an error that the certificate is not valid. I have installed the DOD root certificates, trusted them for email/websites, and imported the individual's signature cert into the store. How do I change the settings / trust on the individual's certificate to trust it? It is within the valid date range.

Wubrane rozwězanje

I had already installed the DOD root certificates as you had mentioned.

I had to manually go through each DOD certificate and "Edit Trust" to allow them to identify websites and email. That solved the problem.

Toś to wótegrono w konteksće cytaś 👍 0

Wšykne wótegrona (2)

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

Generally the issue is missing intermediate certificates. But Personally I think it is funny the supposedly most secure organizations in the world can't meet a public test on their integrity that would see them included in the trusted authorities immediately.

However basically I suggest following the guide for Firefox here https://public.cyber.mil/pki-pke/end-users/getting-started/linux-firefox/

So Step 1 from the web site In Thunderbird open options/ preferences and search for cert then click the Manage Certificates button. The pages are generally the same in Thunderbird and Firefox as Thunderbird uses the same pki code to manage certificates as Firefox. Skip to step 7. from the web site

alan158
alan158 Pšašaŕ
more options

Wubrane rozwězanje

I had already installed the DOD root certificates as you had mentioned.

I had to manually go through each DOD certificate and "Edit Trust" to allow them to identify websites and email. That solved the problem.

Wót alan158 změnjony