[Imaplib2-devel] Re: STARTTLS and certificates Re:[ANNOUNCE] OfflineIMAP v6.3.4-rc3 released

[Piers Lauder]

On Mon, 11 Jul 2011 19:14:26 +0200, Johannes Stezenbach wrote:

	...
                imapobj.starttls(self.sslclientkey, self.sslclientcert,
                    ca_certs=self.sslcacertfile,
                    cert_reqs=ssl.CERT_REQUIRED,
                    cert_verify_cb=imapobj._verifycert)

	...

Just to clarify what "cert_verify_cb" is for :-

If the "ca_certs" value is a PEM formatted file containing certificates
used to validate certificates passed from the other end of the connection,
what added protection does the callback provide?

Piers.