Thunderbird Support Forum

I recently updated my Thunderbird on Linux to 102.10.0 via Centos 7 Yum. Now for certain email addresses I am unable to send encrypted email. Thunderbird says: "Sending of the message failed. You specified encryption for this message, but the application failed to find an encryption certificate for xxx@xxx.xxx" However, I can see via the Account Settings and People certs that those Certs exists and are valid. Also, via command line reading the cert9.db and key4.db, the Cert for those users exist:

Certificate:

   Data:
       Version: 3 (0x2)
       Serial Number: 363175 (0x58aa7)
       Signature Algorithm: PKCS #1 SHA-256 With RSA Encryption
       Issuer: "CN=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXC=US"
       Validity:
           Not Before: Thu Jul 07 00:00:00 2022
           Not After : Sun Jul 06 23:59:59 2025
       Subject: "CN=XXX@XXX.XXX - OU=XXX, OU=XXX, O=XXX

Anyhow, I noticed that the cert8.db and key3.db had older entries, and I move that file to a backup folder so Thunderbird is only using cert9.db and key4.db. Again, the cert exists and Thunderbird sees it with the GUI. I didn't have this problem previously. I did obviously try keeping the cert8.db and key3.db along with cert9.db and key4.db in the Thunderbird dir, but again, it appears Thunderbird has moved on to using cert9.db and key4db. Some users with Valid Certs work for sending encrypted emails and some users do not. BTW: The intermediate signing and root signing certs are all trusted.

Also, for this new Version, when I run the GUI Tool/Tab from Thunderbird -> Security -> View Certificates of Recipients the output shows Not found for any users, even for the users who I am able send an encrypted email to (like myself). I can send myself an encrypted email, but tool output shows as Status "Not Found" for even my own cert even though I can send an encrypted email and read the encrypted email to myself via Thunderbird.

Please advise.

Thanks in advance!

In very simple terms, plz, my mail comes thru AOL to TBird. Changing Outgoing/Incoming settings for TLS 1.2, where do I make the changes, in AOL or TBird, or both? Currently the settings were picked up by TBird when I installed it in 2020. On TBird they all include the name AOL. (I get mixed up with words like 3rd party and email client) Thank you

I am using Thunderbird 91.13.1 (and I have tried to install the latest version of thunderbird as well and still get the same error) and am on a MacBook running macOS Ventura V13.3.1

I am using an IdenTrust PKI hardware token that has a digital cert for encryption and signing.

When I go into my thunderbird account settings>end-to-end encryption, I am able to select my hardware token for digital signing cert and encryption cert. But then when I go to send an encrypted or signed email I get the following error:

Sending of the message failed. You specified that this message should be digitally signed, but the application either failed to find the signing certificate specified in your Mail & Newsgroup Account Settings, or the certificate has expired

I am 100% certain that my certs are valid and have not expired.

And idea on what might be going wrong?