Package: offlineimap
Version: 7.3.3+dfsg1-1+0.0~git20210105.00d395b+dfsg-2
Severity: normal

ERROR: Exceptions occurred during the run!
ERROR: Unknown SSL protocol connecting to host 'kitenet.net' for repository 
'kite'. OpenSSL responded:
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed 
certificate (_ssl.c:1123)

I was using offlineimap 7.3.3+dfsg1-1 and this cert was working fine.
It is not expired and the server has not changed.

I have tried all available ssl configuration settings to try to work
around the problem, but nothing seems to work. What I was using before,
which works with the old version, is:

type = IMAP
ssl = yes
remotehost = kitenet.net
remoteuser = joey
cert_fingerprint = a8bda27c49ba6390e477960014caa672e2beb01d

Of course, the server could be changed to use a lets encrypt ssl cert
instead of the old self-signed cert, but I'm currently unable to access
and fix all the users' devices that would need to be tweaked to work
with a new cert. I've currently downgraded offlineimap, but hope there's
some solution that makes self-signed ssl certs work again.

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.9.0-1-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_USER, TAINT_WARN, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages offlineimap depends on:
ii  offlineimap3  0.0~git20210105.00d395b+dfsg-2

offlineimap recommends no packages.

offlineimap suggests no packages.

-- no debconf information

-- 
see shy jo

Attachment: signature.asc
Description: PGP signature

Reply via email to