On Mon, May 01, 2017 at 04:56:33PM +0530, Sridhar M. A. wrote: > On Sat, Apr 29, 2017 at 02:05:47PM +0200, Nicolas Sebrecht wrote: > > > > You should either use fingerprint or sslcacertfile but not both. > > > Sorry for the delay in posting. Here is the output using > > fingerprint only: > Account sync xx: > *** Processing account xx > Establishing connection to imap.gmail.com:993 (masphys-remote) > ERROR: Server SSL fingerprint 'cc64f9a1815c618562b8f4962d2b353bb7a57852' for > hostname 'imap.gmail.com' does not match configured fingerprint(s) > ['f3043dd689a2e7dddfbef82703a6c65ea9b634c1']. Please verify and set > 'cert_fingerprint' accordingly if not set yet. > *** Finished account 'xx' in 0:00 > ERROR: Exceptions occurred during the run! > ERROR: Server SSL fingerprint 'cc64f9a1815c618562b8f4962d2b353bb7a57852' for > hostname 'imap.gmail.com' does not match configured fingerprint(s) > ['f3043dd689a2e7dddfbef82703a6c65ea9b634c1']. Please verify and set > 'cert_fingerprint' accordingly if not set yet.
So, the fingerprints does not match... > cert only: > Account sync xx: > *** Processing account xx > Establishing connection to imap.gmail.com:993 (masphys-remote) > ERROR: Unknown SSL protocol connecting to host 'imap.gmail.com' for > repository 'masphys-remote'. OpenSSL responded: > [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661) > *** Finished account 'xx' in 0:00 > ERROR: Exceptions occurred during the run! > ERROR: Unknown SSL protocol connecting to host 'imap.gmail.com' for > repository 'masphys-remote'. OpenSSL responded: > [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661) ... and the certificate fails, too. I this a new configuration or did it used to work? In the first case, we might bet you got the configuration wrong and in the latter there was either a certificate change or a MITM attack. -- Nicolas Sebrecht _______________________________________________ OfflineIMAP-project mailing list: [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/offlineimap-project OfflineIMAP homepages: - https://github.com/OfflineIMAP - http://offlineimap.org
