reverting recent SSL-related patches

Nicolas Sebrecht nicolas.s-dev at laposte.net
Sat Jan 10 23:08:52 GMT 2015


Merge branch 'ns/fix-fingerprint' into next

Merge commit for the reverted patches.

I decided to revert the SSL-related patches introduced in the last release
candidate v6.5.7-rc1 :

- 81848628 "Add support for OS-specific CA bundle locations"
- 0a569bea "Add default CA bundle location for DragonFlyBSD"
- 716a6f47 "Add OpenBSD default CA certificates file location"

The cause is that they introduced a regression: the fingerprint option alone is
not working anymore. Such configuration fails on a bad certificate (the one
provided by the default locations).

This is a very hard sanction against this topic. I'm sorry about that. I would
not have done this in other circumstances.

I'd like a release cadidate which can run and with as least regression as
possible for our testers. I aim to introduce unicode support which might come
with a lot of subtle bugs and touching a lot of portions of code in subtle
ways. All possible end-user configurations might be affected.

That's why I'm trying to have a good running reference before this introduction,
even in this early release candidate cycle. Bisecting on alleged bugs on
unicode should be easier if the previous release can run for most testers and
users.

Reported-By: Edd Barrett <edd at theunixzoo.co.uk>
Tested-By: Edd Barrett <edd at theunixzoo.co.uk>
Signed-off-by: Nicolas Sebrecht <nicolas.s-dev at laposte.net>


 offlineimap/repository/IMAP.py |  5 ++---
 offlineimap/utils/distro.py    | 74 --------------------------------------------------------------------------
 2 files changed, 2 insertions(+), 77 deletions(-)

[PATCH 1/3] Revert "Add OpenBSD default CA certificates file
[PATCH 2/3] Revert "Add default CA bundle location for DragonFlyBSD"
[PATCH 3/3] Revert "Add support for OS-specific CA bundle locations"

-- 
Nicolas Sebrecht




More information about the OfflineIMAP-project mailing list