For those people experiencing this problem with offlineimap, the attached
patch fixes the problem for me by forcing SSLv3 connections.
--
Scott Barker
Linux Consultant
sc...@mostlylinux.ca
http://www.mostlylinux.ca
--- /usr/share/pyshared/offlineimap/imaplibutil.py.orig 2011-08-10 13:44:58.000000000 -0600
+++ /usr/share/pyshared/offlineimap/imaplibutil.py 2012-04-27 09:03:31.099857027 -0600
@@ -183,7 +183,7 @@
self.sslobj = ssl.wrap_socket(self.sock, self.keyfile,
self.certfile,
ca_certs = self._cacertfile,
- cert_reqs = requirecert)
+ cert_reqs = requirecert, ssl_version=ssl.PROTOCOL_SSLv3)
except NameError:
#Python 2.4/2.5 don't have the ssl module, we need to
#socket.ssl() here but that doesn't allow cert
@@ -193,7 +193,7 @@
#allow us to easily check it. So bail out here.
raise Exception("SSL CA Certificates cannot be checked with python <=2.6. Abort")
self.sslobj = socket.ssl(self.sock, self.keyfile,
- self.certfile)
+ self.certfile, ssl_version=ssl.PROTOCOL_SSLv3)
else:
#ssl.wrap_socket worked and cert is verified (if configured),
