<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt">Dmitri wrote:<br><div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"><div style="font-family: times new roman, new york, times, serif; font-size: 12pt;">
Noticed offlineimap failing with<br><br> ERROR: Server SSL fingerprint<br>'6d1b5b5ee0180ab493b71d3b94534b5ab937d042' for hostname<br>'<a target="_blank" href="http://imap.gmail.com/">imap.gmail.com</a>' does not match configured fingerprint. Please verify<br>and set 'cert_fingerprint' accordingly if not set yet.<br><br>I have in my .offlineimaprc<br>cert_fingerprint=f3043dd689a2e7dddfbef82703a6c65ea9b634c1<br><br>Repeated attempts to connect only succeed if I set maxconnections = 1.<br>With maxconnections = 5 I see the above error popping up halfway the<br>offlineimap session<br>(different threads hit different certs, I suppose).<br><br>Is it a genuine hacking attempt going on, or some misconfiguration somewhere?<br><br>Any easy way to gather extra info on these connections?<br>(I program in Python, but I have no time to read and modify<br>offlineimap, at least not now...)<br><br>Hi Dmitri,<br><br>Here are the steps to manually verify that gmail SSL
certificate.<br><br>http://www.cyberciti.biz/faq/test-ssl-certificates-diagnosis-ssl-certificate/<br><br>Note that imap.gmail.com is accessible at 2 different ip addresses.<br><br> 173.194.76.108<br>and <br>173.194.76.109<br><br>So you should check both of them, by IP address, not by the hostname..<br><br>Let us know what you find out.<br><br><br></div> </div> </div></body></html>