Package: msmtp
Version: 1.6.7-1
Severity: important

Hi,

I've been using msmtp for years with a GMX mail account. Recently, I
tried to use it with the mail server provided by a webhost of mine, but
msmtp fails to verify the TLS certificate:

msmtp: TLS certificate verification failed: the certificate owner does not 
match hostname mail.bdld.info

It seems that the problem is that the supplied certificate for
mail.bdld.info has bdld.info as the CN. But since mail.bdld.info is in
the list of SANs, the verification should succeed. Indeed, 'openssl
s_client -connect mail.bdld.info:465' reports "Verification: OK", and
swaks successfully sends mail through the server.

-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), 
LANGUAGE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages msmtp depends on:
ii  debconf [debconf-2.0]  1.5.69
ii  libc6                  2.28-3
ii  libgnutls30            3.6.5-2
ii  libgsasl7              1.8.0-8+b2
ii  ucf                    3.0038+nmu1

Versions of packages msmtp recommends:
ii  ca-certificates  20180409

Versions of packages msmtp suggests:
ii  msmtp-mta  1.6.7-1

-- debconf information excluded

Reply via email to