sslcacertfile: "SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed"

[Johannes Kastl]

Hi there,

I havent used my offlineimap setting in a while, today I got:

>  Establishing connection to imap.gmx.net:993.
>  WARNING: Error occured attempting to sync account YYYY: Traceback (most recent call last):
>   File "/Users/XXXX/bin/offlineimap/offlineimap/accounts.py", line 191, in syncrunner
>     self.sync(siglistener)
>   File "/Users/XXXX/bin/offlineimap/offlineimap/accounts.py", line 246, in sync
>     remoterepos.syncfoldersto(localrepos, [statusrepos])
>   File "/Users/XXXX/bin/offlineimap/offlineimap/repository/Base.py", line 121, in syncfoldersto
>     srcfolders = src.getfolders()
>   File "/Users/XXXX/bin/offlineimap/offlineimap/repository/IMAP.py", line 242, in getfolders
>     imapobj = self.imapserver.acquireconnection()
>   File "/Users/XXXX/bin/offlineimap/offlineimap/imapserver.py", line 207, in acquireconnection
>     cacertfile = self.sslcacertfile)
>   File "/Users/XXXX/bin/offlineimap/offlineimap/imaplibutil.py", line 141, in __init__
>     IMAP4_SSL.__init__(self, *args, **kwargs)
>   File "/Users/XXXX/bin/offlineimap/offlineimap/imaplib2.py", line 1871, in __init__
>     IMAP4.__init__(self, host, port, debug, debug_file, identifier, timeout)
>   File "/Users/XXXX/bin/offlineimap/offlineimap/imaplib2.py", line 309, in __init__
>     self.open(host, port)
>   File "/Users/XXXX/bin/offlineimap/offlineimap/imaplibutil.py", line 186, in open
>     cert_reqs = requirecert)
>   File "/opt/local/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/ssl.py", line 372, in wrap_socket
>     ciphers=ciphers)
>   File "/opt/local/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/ssl.py", line 134, in __init__
>     self.do_handshake()
>   File "/opt/local/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/ssl.py", line 296, in do_handshake
>     self._sslobj.do_handshake()
> SSLError: [Errno 1] _ssl.c:503: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

I checked out the rc4 and tried, and got another error message:

> Account sync YYYY:
>  ***** Processing account YYYY
>  Copying folder structure from IMAP to MappedIMAP
>  Establishing connection to imap.gmx.net:993.
>  WARNING: Could not connect via SSL to host 'imap.gmx.net' and non-standard ssl port 993 configured. Make sure you connect to the correct port.
>  ***** Finished processing account YYYY

I do not know why port 993 should no longer work, I haven't changed it.

Deleting the sslcacertfile in the offlineimaprc gets the sync working,
but only without SSL verification. Which worked some time ago.

Any hints?

Regards,
Johannes

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 259 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/offlineimap-project/attachments/20110809/8f3d73e0/attachment.sig>