SSL certs

[Sebastian Spaeth]

On Tue, 15 Mar 2011 15:48:46 +1000, Kereoz <kereoz at breizh-entropy.org> wrote:
> when I ask offlineimap to check SSl certificates
> ssl = yes
> sslcacertfile = ~/.mutt_certificates

>     cert_reqs = requirecert)
>   File "/usr/lib/python2.6/ssl.py", line 338, in wrap_socket
>     suppress_ragged_eofs=suppress_ragged_eofs)
>   File "/usr/lib/python2.6/ssl.py", line 118, in __init__
>     cert_reqs, ssl_version, ca_certs)
> SSLError: [Errno 0] _ssl.c:328: error:00000000:lib(0):func(0):reason(0)


Thanks for testing the recent git code too, much appreciated. SSL error
messages in python are really a pain. And I have no clue what
error:0000:reason(0) could mean here. :-(.

Try one thing: Just try to make the cacertfilepath absolute rather than
relative (I am not sure it expands).

Ooops, I just tested and sure, using ~/... aborts my offlineimap with:
  File "/usr/lib/python2.6/ssl.py", line 338, in wrap_socket
    suppress_ragged_eofs=suppress_ragged_eofs)
  File "/usr/lib/python2.6/ssl.py", line 118, in __init__
    cert_reqs, ssl_version, ca_certs)
SSLError: [Errno 185090050] _ssl.c:328: error:0B084002:x509 certificate
  routines:X509_load_cert_crl_file:system lib

So a different error, but an error nonetheless. I will supply a patch to
fix that one. Can you see if making the path absolute fixes things
already?

Sebastian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/offlineimap-project/attachments/20110315/62a96547/attachment-0001.sig>