Hi Joey, On Mon, Feb 1, 2021 at 5:23 PM Joey Hess <i...@joeyh.name> wrote: > > Sudip Mukherjee wrote: > > I have also faced the same issue while trying to debug another issue and > > this happens when 'cert_fingerprint' is used. I had to use 'sslcacertfile' > > in my setup. > > Anyways, this has been reported upstream already at > > 'https://github.com/OfflineIMAP/offlineimap3/issues/41'. > > Thanks for finding the upstream bug report. > > I did try setting sslcacertfile before, and was not able to get it to > work. However, I also can't get it to work the the older version of > offlineimap, so either there must be something about my cert chain that > doesn't work with that, or perhaps I was putting the wrong thing in the > file.
I checked your certificate at 'kitenet.net' imaps, it has: subject=O = Dovecot mail server, OU = localhost, CN = localhost, emailAddress = root@debian The CN should have been 'kitenet.net' and that is the reason offlineimap is failing to verify the certificate. -- Regards Sudip
