Thunderbird 1:31.8.0+build1-0ubuntu0.15.04.1 never asks for account password

[Darren Peets]

After upgrading to 1:31.8.0+build1-0ubuntu0.15.04.1, Thunderbird no longer asks for an account password, and accordingly cannot access that mail account. Shows [user]@[server]: Connected to [mail server]... as status. This status is maintained indefinitely (or at least beyond the limits of my patience/distraction).

Downgrading to 1:31.6.0+build1-0ubuntu1 fixes the problem, and upgrading again to 1:31.8.0+build1-0ubuntu0.15.04.1 brings the problem back.

Running from a terminal, there is one message:
(process:3721): GLib-CRITICAL **: g_slice_set_config: assertion 'sys_page_size == 0' failed
However, this message appears for the downgraded version as well.

Running Thunderbird in safe mode does not fix the problem.

Expected behaviour:
After launch, Thunderbird asks for password

Actual behaviour:
After launch, Thunderbird never actually asks for a password

In addition, there is a Gmail account set up, set to connect using a stored app password, and Thunderbird successfully fetches mail for this account. The problem is only encountered for the account which requires me to enter a password.

Upstream build: Problem exists there too, so have submitted https://bugzilla.mozilla.org/show_bug.cgi?id=1187297

ProblemType: Bug
DistroRelease: Ubuntu 15.04
Package: thunderbird 1:31.8.0+build1-0ubuntu0.15.04.1
ProcVersionSignature: Ubuntu 3.19.0-23.24-generic 3.19.8-ckt2
Uname: Linux 3.19.0-23-generic x86_64
ApportVersion: 2.17.2-0ubuntu1.1
Architecture: amd64
BuildID: 20150715161744
CurrentDesktop: KDE
Date: Fri Jul 24 21:01:18 2015
IncompatibleExtensions:
 English (GB) Language Pack - <email address hidden>
 Japanese Language Pack - <email address hidden>
 Thunderbird (default) - {972ce4c6-7e08-4474-a285-3208198ce6fd}
InstallationDate: Installed on 2015-03-04 (141 days ago)
InstallationMedia: Kubuntu 15.04 "Vivid Vervet" - Alpha amd64 (20150224.1)
Plugins: Shockwave Flash - /usr/lib/flashplugin-installer/libflashplayer.so
PrefSources:
 prefs.js
 user.js
Profiles: Profile0 (Default) - LastVersion=31.8.0/20150715161744 (In use)
SourcePackage: thunderbird
UpgradeStatus: No upgrade log present (probably fresh install)

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Peter Hewett (peter-hewett)]

Similar problem here.
Running Kubuntu 15.04 64 bit with Thunderbird, accessing POP mail server. It was working just fine until the update on 21 July to Thunderbird 1:31.8.0+build1-0ubuntu0.15.04.1. Since then it just reports no messages to get, but there are messages on the server.
From the Mozilla bug
https://bugzilla.mozilla.org/show_bug.cgi?id=1184488
it appears this might relate to an upstream Mozilla core security change to cease support for keys less than 1023 bits.

[Jose Tovar (j-tovar)]

Ubuntu 14.04 64 bit is also affected by this.
When deleting the ~/.thunderbird directory and trying to add up an email account, it will always return "username or password" error when contacting the server. I've tried this with IMAP and POP settings with the same results.

[Peter Hewett (peter-hewett)]

Although that Bugzilla item #1184488 indicates that small key size < 1023 bits is the issue, I have now confirmed that the mail server I am using has 2048 bit key.
(I did this check using the command from https://bugzilla.mozilla.org/show_bug.cgi?id=1187297#c4 )

[Peter Hewett (peter-hewett)]

The system admin guys changed some settings on the mail server, and Thunderbird is working again!

It appears that there must have been some setting on the mail server that broke things when Thunderbird updated on 21 July. (Sorry, I don't know what setting was changed.)

[Darren Peets (dpeets)]

To summarize what happened on the Mozilla side, my problem at least is a consequence of a fix for LogJam. Thunderbird can't connect because the DH key is no longer considered secure, so it silently fails. No fix is coming. The best solution is to get your sysadmins to update the key. The workaround is to go into Thunderbird's config editor and change the following to False:

security.ssl3.dhe_rsa_aes_128_sha
security.ssl3.dhe_rsa_aes_256_sha
security.ssl3.dhe_dss_aes_128_sha
security.ssl3.dhe_rsa_des_ede3_sha

In some cases, some of these may need to be created first. Note: I would assume that tampering with your security settings to allow less-secure connections may not be a great long-term strategy.

The workaround above works for me. If it doesn't work for you, you may have a separate problem. In that case, I'd suggest checking that the problem exists in Thunderbird as downloaded from Mozilla, then submitting a new bug to Mozilla, saying that changing these four things didn't work. They'll probably want to know your mail server's URI, protocol, port, and connection security.

[pelm (pelle-ekh)]

Same for me, can't connect using SSL to one of my emailsuppliers. Now using Evolution.

[pelm (pelle-ekh)]

The problem has to do, as mentioned, with emailproviders. My provider has switched server from Courier to Dovecot (which is better (he told) in modern technology), and Thunderbird is now back as normal.