Package: alpine
Version: 2.21+dfsg1-1.1
Severity: normal
Dear Maintainer,
This issue occurs when you use alpine in buster to connect (to an imap
server running on squeeze). alpine in squeeze does not have the issue
when connecting to the same imap server.
Initially I was getting certificate name mismatches when alpine
attempted to connect to my imap server. I resolved them by adding a
Subject Alternative Name that matched the Common Name.
However, I still get the certificate name mismatch when I try to send an
email (which can then be ignored)
# openssl x509 -in imapd.pem -noout -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10000044 (0x9896ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C = GB, ST = London, O = Certificate Authority, CN = Tim
Woodall CA
Validity
Not Before: Sep 15 13:20:28 2019 GMT
Not After : Sep 14 13:20:28 2020 GMT
Subject: C = GB, ST = London, O = Tim Woodall, CN =
einstein.home.woodall.me.uk, emailAddress = *********
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
<snip>
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Alternative Name:
DNS:einstein.home.woodall.me.uk
Signature Algorithm: sha256WithRSAEncryption
<snip>
There was a failure validating the SSL/TLS certificate for the server
einstein.home.woodall.me.uk
The reason for the failure was
Server name does not match certificate
(details)
Host given by user:
einstein.home.woodall.me.uk
Reason for failure:
Server name does not match certificate
Certificate being verified:
/C=GB/ST=London/O=Tim
Woodall/CN=einstein.home.woodall.me.uk/emailAddress=**************
-- System Information:
Debian Release: 10.1
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-6-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8),
LANGUAGE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
Versions of packages alpine depends on:
ii libc6 2.28-10
ii libgssapi-krb5-2 1.17-3
ii libkrb5-3 1.17-3
ii libldap-2.4-2 2.4.47+dfsg-3+deb10u1
ii libpam0g 1.3.1-5
ii libssl1.1 1.1.1c-1
ii libtinfo6 6.1+20181013-2+deb10u1
ii mlock 8:2007f~dfsg-6
Versions of packages alpine recommends:
pn alpine-doc <none>
Versions of packages alpine suggests:
ii aspell 0.60.7~20110707-6
pn mail-transport-agent | exim4 <none>
-- no debconf information
