search

infinity0 / mozilla-gnome-keyring-legacy

A firefox extension that enables Gnome Keyring integration (legacy version)
https://bugzilla.mozilla.org/show_bug.cgi?id=309807
Other
55 stars 8 forks source link

Some credentials still stored in Thunderbird's password manager #21

Open ilpssun opened 11 years ago

ilpssun commented 11 years ago

I installed the extension in my Thunderbird 15.0.1 under Ubuntu 12.04 and it works (mostly) well. All passwords for accessing my calendars and reading my emails are stored in my Gnome keyring, which is unlocked using my login password – just as it should be.

However, when I would like to send an email, Thunderbird asks me to unlock the “master security device” (i. e. the TB password safe). It seems that there are some passwords that are not yet saved in the keyring. It appears as though the password for my LDAP account is not saved, either (because I need to unlock the “master security device” for auto-completion of email addresses as well). As indicated below, this has to do with an S/MIME certificate being stored in the Thunderbird security device.

infinity0 commented 11 years ago

Are you simply experiencing this behaviour? From README:

If you don't [manually] clear [your old mozilla password database], you'll still be asked for [the master password] when you choose to "show passwords", even if this extension is active.

ilpssun commented 11 years ago

No, it's not the same issue. But thanks to your pointer, I was able to determine the root cause. It has to do with my S/MIME certificate which is stored in the master security device and needs to be unlocked before I can send any signed emails (my default setting).

So the real question would be: Is it possible to use the Gnome keyring to store the S/MIME certificate as well?

infinity0 commented 11 years ago

I don't know, I will have to research this issue. For passwords, this extension stores snippets of (the GK version of) arbitrary k-v pairs; I don't know if GK can store something as big as an S/MIME certificate. I will ask them (they have a mailing list) when I get some time, or you can do that yourself first if you want.

ilpssun commented 11 years ago

I doesn't really bother me much. I just thought I'd share the problem in case you would like to extend your plugin in this direction. For me personally, it's rather irrelevant because I will have to change platforms and switch away from Thunderbird in a few weeks anyway (a work-related change).