tell user about revoked SSL certificate used by imap server

[sla29970]

I recently replaced the SSL certificate on our courier-imapd server. I botched the server certificate chain install by giving it a chain where the SSL certificate was valid for the date, but the CA had been told to revoke it. I tested with imap clients mutt and Apple Mail on macOS and on iOS, and all of those accepted the revoked certificate and worked to retrieve the mail.  Thunderbird would not retrieve the mail, and Thunderbird gave no indication why it was not retrieving the mail. The only place I could find any clue about the revoke certificate was in the server log files of courier-imapd. When I fixed the SSL chain on the server to use a non-revoked certificate then Thunderbird retrieved the mail. I think Thunderbird should have made it clear to its users with some sort of message that they could report to the server admin.

[Jon]

Thanks for submitting an idea to the Mozilla Connect community! Your idea is now open to votes (aka kudos) and comments.