Bug#703587: libnss3 update disables some (self signed) certs (with Icedove)

[Philonous Atio]

I had the same problem as Erik C.J. Laan, the original poster.

My CA certificate is imported into the "Authorities" section of 
Icedove's certificates, but I have imported no other certificates. This 
setup has been working for a long time in Debian and it works on 
Thunderbird in Windows.

Following Daniel Kahn Gillmor's (dkg) suggestion in #15, on my mail 
server, I "re-generate[d] the same self-signed certificate with the same 
key using SHA1 as the message-signing digest." That allowed the new 
version of libnss3 to work for me.

I agree with dkg that "this sounds to me like a bug in the logic of the 
upgraded version of NSS." It needs to be fixed.

Thanks, dkg!

Regards,
Phil