Thanks for reporting that here:
https://bugs.launchpad.net/ubuntu/+source/sylpheed/+bug/1847716
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: O
Got the same issue on Sylpheed after upgrading to bionic. Any ideas?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please f
** Tags added: bionic-openssl-1.1
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please fix
your client./CN=invalid2.inval
I believe https://mta.openssl.org/pipermail/openssl-
project/2018-April/000635.html explains why the problem with gmail
occurs only with TLS 1.3.
When I hit the problem two days ago, using 'sslproto "TLS1.2"' (with no
'+') in my configuration for gmail fixed the problem, since it forced
the use of
This bug was fixed in the package fetchmail - 6.3.26-3ubuntu0.1~18.04.1
---
fetchmail (6.3.26-3ubuntu0.1~18.04.1) bionic; urgency=medium
* d/p/sni-support.patch: TLS: set hostname for SNI. Thanks to Matthias
Andree (LP: #1798786)
-- Andreas Hasenack Wed, 12 Jun 2019 10:46:3
Steve said:
Is the bug description here inaccurate? It states that this problem exists when
using TLS1.2, which was supported by OpenSSL on Bionic at release time. Does
the problem in fact only occur with TLS1.3?
The bug description is accurate. OpenSSL 1.1.1 started to validate and thus
enfor
Is the bug description here inaccurate? It states that this problem
exists when using TLS1.2, which was supported by OpenSSL on Bionic at
release time. Does the problem in fact only occur with TLS1.3?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscri
Bionic verification
First, reproducing the bug, following the test steps:
Version used:
*** 6.3.26-3build1 500
500 http://archive.ubuntu.com/ubuntu bionic/main amd64 Packages
Bug reproduced:
root@bionic-fetchmail-sni:~# fetchmail -d0 -vk --sslcertck pop.gmail.com
fetchmail: WARNING: Run
This seems like a very appropriate candidate for skipping the normal
ageing period. We understand the problem well, it has been fixed in
Cosmic for a long time, and the Bionic source will now be identical
(apart from the changelog). And I am fairly confident there are a non-
zero number of users us
Hello Hassan, or anyone else affected,
Accepted fetchmail into bionic-proposed. The package will build now and
be available at
https://launchpad.net/ubuntu/+source/fetchmail/6.3.26-3ubuntu0.1~18.04.1
in a few hours, and then in the -proposed repository.
Please help us by testing this new package.
Uploaded, it's in the SRU bionic queue
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please fix
your client./CN=invalid2.
** Changed in: fetchmail (Ubuntu Bionic)
Status: New => In Progress
** Changed in: fetchmail (Ubuntu Bionic)
Assignee: (unassigned) => Andreas Hasenack (ahasenack)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bu
** Tags added: regression-update
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please fix
your client./CN=invalid2.invali
** Merge proposal linked:
https://code.launchpad.net/~ahasenack/ubuntu/+source/fetchmail/+git/fetchmail/+merge/368713
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve
Confirmed it's now happening in bionic, thanks for the heads up!
** Also affects: fetchmail (Ubuntu Bionic)
Importance: Undecided
Status: New
** Changed in: fetchmail (Ubuntu Bionic)
Importance: Undecided => High
--
You received this bug notification because you are a member of Ubu
This morning an update for openssl and libssl from 1.1.0g to 1.1.1 went
out to bionic (Ubuntu 18.04 LTS), which means bionic users are now
affected by this bug as well (given that 1.1.1 ships TLS 1.3 support,
plus the google configuration described in
https://mta.openssl.org/pipermail/openssl-proje
** Changed in: fetchmail (Debian)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please f
This bug was fixed in the package fetchmail - 6.3.26-3ubuntu0.1
---
fetchmail (6.3.26-3ubuntu0.1) cosmic; urgency=medium
* d/p/sni-support.patch: TLS: set hostname for SNI. Thanks to Matthias
Andree (LP: #1798786)
-- Karl Stenerud Wed, 24 Oct 2018
05:12:24 -0700
** Changed
Thanks Hassan,
Updating tags per previous comment.
** Tags removed: verification-needed verification-needed-cosmic
** Tags added: verification-done verification-done-cosmic
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs
Hi Brian, hi folks,
The patch/new build seems to fix the issue, thanks for the fix.
fetchmail: 6.3.26 querying pop.gmail.com (protocol POP3) at Wed Nov 14 11:24:19
2018: poll completed
fetchmail: New UID list from pop.gmail.com:
fetchmail: not swapping UID lists, no UIDs seen this query
fetchma
Hello Hassan, or anyone else affected,
Accepted fetchmail into cosmic-proposed. The package will build now and
be available at
https://launchpad.net/ubuntu/+source/fetchmail/6.3.26-3ubuntu0.1 in a
few hours, and then in the -proposed repository.
Please help us by testing this new package. See
ht
Uploaded to cosmic-proposed, waiting for SRU team's inspection.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please fix
This bug was fixed in the package fetchmail - 6.3.26-3ubuntu1
---
fetchmail (6.3.26-3ubuntu1) disco; urgency=medium
* d/p/sni-support.patch: TLS: set hostname for SNI. Thanks to Matthias
Andree (LP: #1798786)
-- Karl Stenerud Wed, 24 Oct 2018
05:12:24 -0700
** Changed in:
** Merge proposal linked:
https://code.launchpad.net/~kstenerud/ubuntu/+source/fetchmail/+git/fetchmail/+merge/358699
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve
** Changed in: fetchmail (Debian)
Status: Unknown => New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please fix
The upload of this fix is just waiting for the ubuntu Disco archive to
reopen after the cosmic release, as the fix needs to be applied there
first.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
I confirm that sslproto "TLS1" seems to be a workaround
fetchmail: Chaîne de certification, depuis la racine jusqu'au correspondant,
débutant à la profondeur 2:
fetchmail: Organisation de l'expéditeur: GlobalSign
fetchmail: Nom commun de l'émetteur : GlobalSign
fetchmail: Nom commun du sujet: Glo
I got the problem just after updating my Raspberry PI3
OpenSSL> version
OpenSSL 1.1.1 11 Sep 2018
OpenSSL>
fetchmail, version 6.3.26+GSS+NTLM+SDPS+SSL-SSLv3+NLS+KRB5.
cat /etc/issue
Raspbian GNU/Linux 9 \n \l
--
You received this bug notification because you are a member of Ubuntu
Bugs, whic
Cannot confirm that this affects bionic. This may be due to openssl
1.1.0 (in bionic) sending a default SNI when none is provided, whereas
1.1.1 (in cosmic) sends nothing.
** No longer affects: fetchmail (Ubuntu Bionic)
--
You received this bug notification because you are a member of Ubuntu
Bug
** Also affects: fetchmail (Ubuntu Cosmic)
Importance: High
Assignee: Karl Stenerud (kstenerud)
Status: Fix Committed
** Changed in: fetchmail (Ubuntu Cosmic)
Status: Fix Committed => In Progress
** Also affects: fetchmail (Ubuntu Bionic)
Importance: Undecided
Stat
** Description changed:
+ [Impact]
+
+ Fetchmail doesn't set hostname for SNI when using TLS. Without this,
+ fetchmail fails to verify the SSL certificate using TLS 1.2 for places
+ such as pop.gmail.com.
+
+ [Test Case]
+
+ # lxc launch ubuntu:cosmic tester
+ # lxc exec tester bash
+ # apt up
** Merge proposal linked:
https://code.launchpad.net/~kstenerud/ubuntu/+source/fetchmail/+git/fetchmail/+merge/357802
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve
** Changed in: fetchmail (Ubuntu)
Assignee: (unassigned) => Karl Stenerud (kstenerud)
** Changed in: fetchmail (Ubuntu)
Status: Triaged => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.ne
Ah, I see the other bug reports now.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please fix
your client./CN=invalid2.in
upstream patch:
https://gitlab.com/fetchmail/fetchmail/commit/9b8b634312f169fab872f3580c2febe5af031615
** Changed in: fetchmail (Ubuntu)
Status: New => Triaged
** Changed in: fetchmail (Ubuntu)
Importance: Undecided => High
** Tags added: server-next
** Bug watch added: Debian Bug tra
Thanks for filing this bug in Ubuntu.
The fetchmail package in Ubuntu is a sync from the Debian package, with
no further changes.
Do you have a sample config (minus usernames and passwords, of course)
that shows the problem? Just the sslproto setting with gmail is enough
to reproduce it?
--
You
Hi Matthias,
You're right, the [sslproto "TLS1.2+"] was commented on my fetchmailrc,
but forcing the value to TLS1 solved my issue with SNI/TLS1.2.
I have found some old logs where fetchmail was working perfectly before the
upgrade to cosmic
fetchmail: 6.3.26 interroge pop.sunrise.ch (protocol
Fetchmail 6.3.26 indeed does not set the SNI. The original fetchmail
6.3.26 also does not support TLS1.2+ or thereabouts, see
https://gitlab.com/fetchmail/fetchmail/blob/legacy_63/socket.c#L906 - if
Ubuntu's shipped version does, it is not the original authentic
fetchmail 6.3.26.
--
You received
using [sslproto "TLS1"] instead of [sslproto "TLS1.2+"] seems to bypass
the issue.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI prov
fetchmail: 6.3.26 querying pop.gmail.com (protocol POP3) at Fri Oct 19 11:58:36
2018: poll started
fetchmail: Trying to connect to 108.177.119.109/995...connected.
fetchmail: Server certificate:
fetchmail: Unknown Organization
fetchmail: Issuer CommonName: invalid2.invalid
fetchmail: Subject Commo
40 matches
Mail list logo