Package: imapfilter
Version: 1:2.6.11-1
Severity: normal
Tags: upstream

imapfilter fails to set SNI. This means that imapfilter no longer works
with Gmail's IMAP servers. In particular, Gmail sends a self-signed
certificate, causing imapfilter to preset the following:

    Server certificate subject: /OU=No SNI provided; please fix your 
client./CN=invalid2.invalid
    Server certificate issuer: /OU=No SNI provided; please fix your 
client./CN=invalid2.invalid
    Server certificate serial: FFFFFFFFFFFFFFFF
    Server key fingerprint: 90:4A:C8:D5:44:5A:D0:6A:8A:10:FF:CD:8B:11:BE:16
    (R)eject, accept (t)emporarily or accept (p)ermanently?

See the following thread on openssl-project for details:

https://mta.openssl.org/pipermail/openssl-project/2018-April/000623.html

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 
'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.17.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_CA.UTF-8), LANGUAGE=en_CA.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set 
to en_CA.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages imapfilter depends on:
ii  libc6        2.27-5
ii  liblua5.2-0  5.2.4-1.1+b2
ii  libpcre3     2:8.39-11
ii  libssl1.1    1.1.1~~pre9-1

imapfilter recommends no packages.

imapfilter suggests no packages.

-- no debconf information

-- 
|)|/  Ryan Kavanagh      | GPG: 4E46 9519 ED67 7734 268F
|\|\  https://rak.ac     |      BD95 8F7B F8FC 4A11 C97A

Attachment: signature.asc
Description: PGP signature

Reply via email to