![Thunderbird logo](https://assets-prod.sumo.prod.webservices.mozgcp.net/media/uploads/products/2024-02-12-07-36-53-599028_1.png)
Can't download outlook.office365.com mail. Thunderbird 102 / POP3/ OAuth2: `NS_ERROR_FAILURE: Couln't decrypt string`.
Thunderbird 102.6.1 (64-bit) on Windows 10 machine
I cannot download my mail (POP3) from University server (outlook.office365.com, port 995) configured with SSL/TLS and OAuth2 after changing the password. Note that I could download my mail without problem before the password change. Now, when I click on the Get Email, I see "Host contacted, sending login information ...".
On the Error console, I see a series of `NS_ERROR_FAILURE: Couln't decrypt string`.
I have tried:
- TB as allowed app in windows firewall
- Deleting saved passwords. This leads to TB to show windows for credentials. After entering the new password, the windows disappear and we are back to the above problem.
- If I enter a wrong password, I am asked to enter the correct one. After entering the correct password, I think that a token is successveli retrieved because of the line in the error console: `15:57:55.730 XHRPOSThttps://login.microsoftonline.com/common/oauth2/v2.0/token [HTTP/1.1 200 OK 438ms]`.
- Note that in the error console, this message NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name]` appear.
- Deleting cert9.dn, key4.db, xulstore.json, logins.json in profile does not help.
Error console transcript:
15:57:25.762 addFolderIconToElement() Component returned failure code: 0x80070057 (NS_ERROR_ILLEGAL_VALUE) [nsIMsgFolder.getStringProperty] ?:132 15:57:32.705 NS_ERROR_FAILURE: Couldn't decrypt string crypto-SDR.js:200
decrypt resource://gre/modules/crypto-SDR.js:200 _decryptLogins resource://gre/modules/storage-json.js:846 findLogins resource://gre/modules/storage-json.js:705 findLogins resource://gre/modules/LoginManager.jsm:513 get refreshToken resource:///modules/OAuth2Module.jsm:122 get resource:///modules/OAuth2Module.jsm:112 connect resource:///modules/OAuth2.jsm:74 onPromptAuthAvailable resource:///modules/OAuth2Module.jsm:182 onPromptStartAsync resource:///modules/OAuth2Module.jsm:178 _promiseAuthPrompt resource:///modules/MsgAsyncPrompter.jsm:54 _promiseAuthPrompt resource:///modules/MsgAsyncPrompter.jsm:52 run resource:///modules/MsgAsyncPrompter.jsm:77 AsyncFunctionNext self-hosted:632
15:57:33.185 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] 3 OAuth2.jsm:171
onStateChange resource:///modules/OAuth2.jsm:171
15:57:33.728 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] 2 OAuth2.jsm:171
onStateChange resource:///modules/OAuth2.jsm:171
15:57:34.038 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] OAuth2.jsm:171
onStateChange resource:///modules/OAuth2.jsm:171
15:57:52.598 Not showing popup notification password with the message Save login for hsr.it? browserRequest.js:12:13 15:57:52.599 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] OAuth2.jsm:171
onStateChange resource:///modules/OAuth2.jsm:171
15:57:52.931 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] 2 OAuth2.jsm:171
onStateChange resource:///modules/OAuth2.jsm:171
15:57:55.517 NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] OAuth2.jsm:171
onStateChange resource:///modules/OAuth2.jsm:171
15:57:55.730 XHRPOSThttps://login.microsoftonline.com/common/oauth2/v2.0/token [HTTP/1.1 200 OK 438ms] 15:57:55.752 Loading failed for the <script> with source “chrome://global/content/netError.js”. neterror:128:4 15:57:56.172 NS_ERROR_FAILURE: Couldn't decrypt string crypto-SDR.js:200
decrypt resource://gre/modules/crypto-SDR.js:200 _decryptLogins resource://gre/modules/storage-json.js:846 findLogins resource://gre/modules/storage-json.js:705 findLogins resource://gre/modules/LoginManager.jsm:513 set refreshToken resource:///modules/OAuth2Module.jsm:136 set resource:///modules/OAuth2Module.jsm:114 requestAccessToken resource:///modules/OAuth2.jsm:289
15:57:56.175 NS_ERROR_FAILURE: Couldn't decrypt string crypto-SDR.js:200
decrypt resource://gre/modules/crypto-SDR.js:200 _decryptLogins resource://gre/modules/storage-json.js:846 findLogins resource://gre/modules/storage-json.js:705 findLogins resource://gre/modules/LoginManager.jsm:513 addLogin resource://gre/modules/LoginManager.jsm:315 set refreshToken resource:///modules/OAuth2Module.jsm:170 set resource:///modules/OAuth2Module.jsm:114 requestAccessToken resource:///modules/OAuth2.jsm:289
Edeziri
All Replies (3)
Hmm do you have an anti virus that might be messing with SSL/TLS certificates. Avast and Kaspersky do this man in the middle hack I know using self signed certificates , others as well. If the certificate is being changed on the sly by the anti virus then a failure to decrypt would be something I would expect.
Thank you for the reply because I did not find a solution yet. I have only Windows Security built-in virus protection but tunrning it off did not help. Please, help find me a solution and/how suggest steps to identify the issue better.
My account setup might be a bit unconventional because I transfered my profile from another machine and edited profiles.ini manually. It was working fine until I had to the change of password a week ago.
Here are my install.ini:
[D78BF5DD33499EC2] Default=Profiles/vqctlixl.default-release Locked=1
and profiles.ini files:
[InstallD78BF5DD33499EC2] Default=Profiles/gabriel Locked=1 [Profile2] Name=gabriel IsRelative=1 Path=Profiles/gabriel Default=1 [Profile1] Name=default IsRelative=1 Path=Profiles/fyzzvz0o.default [Profile0] Name=default-release IsRelative=1 Path=Profiles/vqctlixl.default-release [General] StartWithLastProfile=1 Version=2
Only the Profiles/gabriel folder exists and contains all my profile. Is it ok? Should I try to create new account? How can I do it without messing up with previous downloaded mail?
Edeziri
Help needed. I would like to understand why it is happening and how to fix it. I can't download my mail with TB. Thanks.