How to fix SSL rejection in offlineimap
I installed server.crt created following the instructions in Ubuntu certificates. Here is the output when I attempt to run offlineimap. What do I need to do in order to get the SSL working?
OfflineIMAP 7.1.5
Licensed under the GNU GPL v2 or any later version (with an OpenSSL exception)
imaplib2 v2.57 (system), Python v2.7.15rc1, OpenSSL 1.1.0g 2 Nov 2017
Account sync Gmail:
*** Processing account Gmail
Establishing connection to imap.gmail.com:993 (Remote)
ERROR: Unknown SSL protocol connecting to host 'imap.gmail.com' for repository 'Remote'. OpenSSL responded:
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:726)
ssl imap offlineimap
edited Feb 15 at 0:55
JakeGould
32.2k1098141
asked Feb 15 at 0:37
StephenStephen
62
add a comment |
I installed server.crt created following the instructions in Ubuntu certificates. Here is the output when I attempt to run offlineimap. What do I need to do in order to get the SSL working?
OfflineIMAP 7.1.5
Licensed under the GNU GPL v2 or any later version (with an OpenSSL exception)
imaplib2 v2.57 (system), Python v2.7.15rc1, OpenSSL 1.1.0g 2 Nov 2017
Account sync Gmail:
*** Processing account Gmail
Establishing connection to imap.gmail.com:993 (Remote)
ERROR: Unknown SSL protocol connecting to host 'imap.gmail.com' for repository 'Remote'. OpenSSL responded:
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:726)
ssl imap offlineimap
edited Feb 15 at 0:55
JakeGould
32.2k1098141
asked Feb 15 at 0:37
StephenStephen
62
add a comment |
I installed server.crt created following the instructions in Ubuntu certificates. Here is the output when I attempt to run offlineimap. What do I need to do in order to get the SSL working?
OfflineIMAP 7.1.5
Licensed under the GNU GPL v2 or any later version (with an OpenSSL exception)
imaplib2 v2.57 (system), Python v2.7.15rc1, OpenSSL 1.1.0g 2 Nov 2017
Account sync Gmail:
*** Processing account Gmail
Establishing connection to imap.gmail.com:993 (Remote)
ERROR: Unknown SSL protocol connecting to host 'imap.gmail.com' for repository 'Remote'. OpenSSL responded:
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:726)
ssl imap offlineimap
edited Feb 15 at 0:55
JakeGould
32.2k1098141
asked Feb 15 at 0:37
StephenStephen
62
I installed server.crt created following the instructions in Ubuntu certificates. Here is the output when I attempt to run offlineimap. What do I need to do in order to get the SSL working?
OfflineIMAP 7.1.5
Licensed under the GNU GPL v2 or any later version (with an OpenSSL exception)
imaplib2 v2.57 (system), Python v2.7.15rc1, OpenSSL 1.1.0g 2 Nov 2017
Account sync Gmail:
*** Processing account Gmail
Establishing connection to imap.gmail.com:993 (Remote)
ERROR: Unknown SSL protocol connecting to host 'imap.gmail.com' for repository 'Remote'. OpenSSL responded:
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:726)
ssl imap offlineimap
ssl imap offlineimap
edited Feb 15 at 0:55
JakeGould
32.2k1098141
asked Feb 15 at 0:37
StephenStephen
62
edited Feb 15 at 0:55
JakeGould
32.2k1098141
asked Feb 15 at 0:37
StephenStephen
62
edited Feb 15 at 0:55
JakeGould
32.2k1098141
edited Feb 15 at 0:55
JakeGould
32.2k1098141
edited Feb 15 at 0:55
JakeGould
32.2k1098141
32.2k1098141
asked Feb 15 at 0:37
StephenStephen
62
asked Feb 15 at 0:37
StephenStephen
62
asked Feb 15 at 0:37
StephenStephen
62
62
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
the issue is that the instructions I followed are for setting up a server to verify itself to clients, while offlineimap is a client and it actually needs to verify that Gmail is what it pretends to be and not some impersonator. so the setup needs to be
sslcacertfile = /etc/ssl/certs/ca-certificates.crt
which is already available on Linux boxes and there is no need to do anything about setting up SSL.
answered Feb 15 at 23:34
StephenStephen
62
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1405905%2fhow-to-fix-ssl-rejection-in-offlineimap%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
the issue is that the instructions I followed are for setting up a server to verify itself to clients, while offlineimap is a client and it actually needs to verify that Gmail is what it pretends to be and not some impersonator. so the setup needs to be
sslcacertfile = /etc/ssl/certs/ca-certificates.crt
which is already available on Linux boxes and there is no need to do anything about setting up SSL.
answered Feb 15 at 23:34
StephenStephen
62
add a comment |
the issue is that the instructions I followed are for setting up a server to verify itself to clients, while offlineimap is a client and it actually needs to verify that Gmail is what it pretends to be and not some impersonator. so the setup needs to be
sslcacertfile = /etc/ssl/certs/ca-certificates.crt
which is already available on Linux boxes and there is no need to do anything about setting up SSL.
answered Feb 15 at 23:34
StephenStephen
62
add a comment |
the issue is that the instructions I followed are for setting up a server to verify itself to clients, while offlineimap is a client and it actually needs to verify that Gmail is what it pretends to be and not some impersonator. so the setup needs to be
sslcacertfile = /etc/ssl/certs/ca-certificates.crt
which is already available on Linux boxes and there is no need to do anything about setting up SSL.
answered Feb 15 at 23:34
StephenStephen
62
the issue is that the instructions I followed are for setting up a server to verify itself to clients, while offlineimap is a client and it actually needs to verify that Gmail is what it pretends to be and not some impersonator. so the setup needs to be
sslcacertfile = /etc/ssl/certs/ca-certificates.crt
which is already available on Linux boxes and there is no need to do anything about setting up SSL.
answered Feb 15 at 23:34
StephenStephen
62
answered Feb 15 at 23:34
StephenStephen
62
answered Feb 15 at 23:34
StephenStephen
62
answered Feb 15 at 23:34
StephenStephen
62
62
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1405905%2fhow-to-fix-ssl-rejection-in-offlineimap%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
