Bug 1920207

Summary: Thunderbird flatpak cannot add some email accounts.
Product: Red Hat Enterprise Linux 8 Reporter: Bill Sanford <bsanford>
Component: thunderbird-flatpak-containerAssignee: Jan Horak <jhorak>
Status: CLOSED NOTABUG QA Contact: Bill Sanford <bsanford>
Severity: medium Docs Contact: Marek Suchánek <msuchane>
Priority: unspecified    
Version: 8.4CC: jkoten, mkrajnak, tpelka, tpopela, vhumpa
Target Milestone: rc   
Target Release: 8.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-06-23 07:33:57 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Bill Sanford 2021-01-25 19:08:13 UTC 
Description of problem:
After installing the Thunderbird flatpak I try to add an email account. When I input all the correct information, I think try to click and select, "Confirm Security Exception." At this point, nothing happens. The "Add Security Selection" dialog box is present and not responding to my input.

After I select the Cancel button, I get an error message, "Unable to login to server. Probably wrong configuration, username or password."


Version-Release number of selected component (if applicable):
RHEL-8.4.0-20210122.n.0

How reproducible:
100%

Steps to Reproduce:
1. Install latest 8.4
2. Follow setup https://docs.engineering.redhat.com/display/DESKTOPQE/Flatpak+testing
3. Intall TB as a flatpak 

Actual results:
Thunderbird could not connect to email server to verify security exception.

Expected results:
Thunderbird could connect to email server to verify security exception.

Additional info:

I was using for the flatpak install: 

https://docs.engineering.redhat.com/display/DESKTOPQE/Flatpak+testing


This is the output of the command after the install of flatpak environment:

flatpak remote-ls brew-8.4.0

Name               Application ID                    Version       Branch
GIMP               org.gimp.GIMP                                   stable
Inkscape           org.inkscape.Inkscape                           stable
LibreOffice        org.libreoffice.LibreOffice                     stable
Firefox            org.mozilla.Firefox                             stable
Thunderbird        org.mozilla.Thunderbird                         stable
Platform           com.redhat.Platform                             el8
Sdk                com.redhat.Sdk                                  el8
Comment 3 Bill Sanford 2021-02-02 15:02:57 UTC 
I just tried 8.3.1 and I get the same result.
Comment 4 Tomas Pelka 2021-02-02 15:10:38 UTC 
Bill have you tried you personal google account or RedHat one? 

RedHat one may have issue with the fact that we do have our own certification authority so from nss point of view it is an external cert. And I think non-system ones may be the problem for flatpak apps.
Comment 5 Bill Sanford 2021-02-02 15:52:24 UTC 
I tried a non RH account yesterday and it failed. I just tried a google email and it succeeded.
Comment 6 Bill Sanford 2021-02-02 16:48:42 UTC 
I just tried my Red Hat account and with the update-crypto-policies set to Legacy and it still fails.
Comment 7 Jan Horak 2021-04-15 11:20:55 UTC 
Yes, it seems that update-crypto-policies does not make changes to the flatpak applications. There's some workaround regarding this issue.

1. Please check the authorities in Preferences/Manage Certificates/Authorities if it contains Red Hat entries first.
2. Compare with rpm installed Thunderbird.
3. Try the workaround: https://bugzilla.redhat.com/show_bug.cgi?id=1766340#c3
Comment 9 Martin Krajnak 2021-06-23 07:29:28 UTC 
Hi all,

sorry for late reply, as I had zero experience with Thunderbird, so I found this tutorial https://source.redhat.com/groups/public/zimbra_to_gmail/tips__tricks/thunderbird_migrating_from_zimbra_to_gmail and it worked without any workarounds for me. (I even checked the settings and I don't have Red Had entry in Certificates section).

$ flatpak info org.mozilla.Thunderbird

Thunderbird - Send and Receive Email

          ID: org.mozilla.Thunderbird
         Ref: app/org.mozilla.Thunderbird/x86_64/stable
        Arch: x86_64
      Branch: stable
      Origin: rhel
  Collection: 
Installation: user
   Installed: 269.3 MB
     Runtime: com.redhat.Platform/x86_64/el8
         Sdk: com.redhat.Sdk/x86_64/el8

      Commit: a3290746b799146e9fdd4310d1d0e664b32ebfa801b5eaf6ee9c531d03643e3e
     Subject: Export org.mozilla.Thunderbird
        Date: 2021-03-31 14:34:42 +0000
      Alt-id: 195936f64b4d79b392b1017f5994f81c9092fd3a037482ce35457e2f2af9c6aa