<DKIM> Cannot use offlineimap with gmail

[Nicolas Sebrecht]

On Mon, May 01, 2017 at 04:56:33PM +0530, Sridhar M. A. wrote:
> On Sat, Apr 29, 2017 at 02:05:47PM +0200, Nicolas Sebrecht wrote:
>    > 
>    > You should either use fingerprint or sslcacertfile but not both.
>    > 
> Sorry for the delay in posting. Here is the output using
> 
> fingerprint only:
> Account sync xx:
>  *** Processing account xx
>  Establishing connection to imap.gmail.com:993 (masphys-remote)
>  ERROR: Server SSL fingerprint 'cc64f9a1815c618562b8f4962d2b353bb7a57852' for hostname 'imap.gmail.com' does not match configured fingerprint(s) ['f3043dd689a2e7dddfbef82703a6c65ea9b634c1'].  Please verify and set 'cert_fingerprint' accordingly if not set yet.
>  *** Finished account 'xx' in 0:00
> ERROR: Exceptions occurred during the run!
> ERROR: Server SSL fingerprint 'cc64f9a1815c618562b8f4962d2b353bb7a57852' for hostname 'imap.gmail.com' does not match configured fingerprint(s) ['f3043dd689a2e7dddfbef82703a6c65ea9b634c1'].  Please verify and set 'cert_fingerprint' accordingly if not set yet.

So, the fingerprints does not match...

> cert only:
> Account sync xx:
>  *** Processing account xx
>  Establishing connection to imap.gmail.com:993 (masphys-remote)
>  ERROR: Unknown SSL protocol connecting to host 'imap.gmail.com' for repository 'masphys-remote'. OpenSSL responded:
> [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)
>  *** Finished account 'xx' in 0:00
> ERROR: Exceptions occurred during the run!
> ERROR: Unknown SSL protocol connecting to host 'imap.gmail.com' for repository 'masphys-remote'. OpenSSL responded:
> [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)

... and the certificate fails, too.


I this a new configuration or did it used to work? In the first case, we
might bet you got the configuration wrong and in the latter there was
either a certificate change or a MITM attack.

-- 
Nicolas Sebrecht