Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1045940 > unrolled thread

Bug#981677: offlineimap3: broken handling of self-signed certificates after upgrade to offlineimap3

Started byWouter Verhelst <wouter@debian.org>
First post2021-02-02 20:50 +0100
Last post2021-02-02 23:20 +0100
Articles 2 — 2 participants

Back to article view | Back to linux.debian.bugs.dist


Contents

  Bug#981677: offlineimap3: broken handling of self-signed certificates after upgrade to offlineimap3 Wouter Verhelst <wouter@debian.org> - 2021-02-02 20:50 +0100
    Bug#981677: offlineimap3: broken handling of self-signed certificates after upgrade to offlineimap3 Sudip Mukherjee <sudipm.mukherjee@gmail.com> - 2021-02-02 23:20 +0100

#1045940 — Bug#981677: offlineimap3: broken handling of self-signed certificates after upgrade to offlineimap3

FromWouter Verhelst <wouter@debian.org>
Date2021-02-02 20:50 +0100
SubjectBug#981677: offlineimap3: broken handling of self-signed certificates after upgrade to offlineimap3
Message-ID<BE9Qt-7KR-3@gated-at.bofh.it>
Package: offlineimap3
Version: 0.0~git20210105.00d395b+dfsg-2
Severity: normal

Hi,

I have the following in my .offlineimaprc:

remotehost = ...
cert_fingerprint = ...
ssl = yes

Which used to work fine with offlineimap when it was running on python2.
However, after the upgrade to the python3 version, I get:

OfflineIMAP 7.3.0
  Licensed under the GNU GPL v2 or any later version (with an OpenSSL exception)
imaplib2 v3.05, Python v3.9.1+, OpenSSL 1.1.1i  8 Dec 2020
Account sync Test:
 *** Processing account Test
 Establishing connection to imap.grep.be:993 (Folk)
 ERROR: Unknown SSL protocol connecting to host 'imap.grep.be' for repository 'Folk'. OpenSSL responded:
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate (_ssl.c:1123)
 *** Finished account 'Test' in 0:00

... which is obviously not very useful.

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'testing-debug'), (500, 'stable-debug'), (500, 'unstable'), (500, 'stable'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, riscv64, armhf

Kernel: Linux 5.10.0-2-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8), LANGUAGE=nl_BE:nl
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages offlineimap3 depends on:
ii  python3           3.9.1-1
ii  python3-distro    1.5.0-1
ii  python3-imaplib2  2.57-5.2

offlineimap3 recommends no packages.

offlineimap3 suggests no packages.

-- no debconf information

[toc] | [next] | [standalone]


#1045980

FromSudip Mukherjee <sudipm.mukherjee@gmail.com>
Date2021-02-02 23:20 +0100
Message-ID<BEcbD-Rl-5@gated-at.bofh.it>
In reply to#1045940
Hi Wouter,

On Tue, Feb 02, 2021 at 09:45:32PM +0200, Wouter Verhelst wrote:
> Package: offlineimap3
> Version: 0.0~git20210105.00d395b+dfsg-2
> Severity: normal
> 
> Hi,
> 
> I have the following in my .offlineimaprc:
> 
> remotehost = ...
> cert_fingerprint = ...

Can you please confirm if you only have 'cert_fingerprint' and do not have 'sslcacertfile'..

--
Regards
Sudip

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.bugs.dist


csiph-web