Thanks for reporting that here:
https://bugs.launchpad.net/ubuntu/+source/sylpheed/+bug/1847716
--
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails.
Thanks for reporting that here:
https://bugs.launchpad.net/ubuntu/+source/sylpheed/+bug/1847716
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail:
Got the same issue on Sylpheed after upgrading to bionic. Any ideas?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please
** Tags added: bionic-openssl-1.1
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please fix
your
I believe https://mta.openssl.org/pipermail/openssl-
project/2018-April/000635.html explains why the problem with gmail
occurs only with TLS 1.3.
When I hit the problem two days ago, using 'sslproto "TLS1.2"' (with no
'+') in my configuration for gmail fixed the problem, since it forced
the use
This bug was fixed in the package fetchmail - 6.3.26-3ubuntu0.1~18.04.1
---
fetchmail (6.3.26-3ubuntu0.1~18.04.1) bionic; urgency=medium
* d/p/sni-support.patch: TLS: set hostname for SNI. Thanks to Matthias
Andree (LP: #1798786)
-- Andreas Hasenack Wed, 12 Jun 2019
Steve said:
Is the bug description here inaccurate? It states that this problem exists when
using TLS1.2, which was supported by OpenSSL on Bionic at release time. Does
the problem in fact only occur with TLS1.3?
The bug description is accurate. OpenSSL 1.1.1 started to validate and thus
Bionic verification
First, reproducing the bug, following the test steps:
Version used:
*** 6.3.26-3build1 500
500 http://archive.ubuntu.com/ubuntu bionic/main amd64 Packages
Bug reproduced:
root@bionic-fetchmail-sni:~# fetchmail -d0 -vk --sslcertck pop.gmail.com
fetchmail: WARNING:
Is the bug description here inaccurate? It states that this problem
exists when using TLS1.2, which was supported by OpenSSL on Bionic at
release time. Does the problem in fact only occur with TLS1.3?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
Bionic verification
First, reproducing the bug, following the test steps:
Version used:
*** 6.3.26-3build1 500
500 http://archive.ubuntu.com/ubuntu bionic/main amd64 Packages
Bug reproduced:
root@bionic-fetchmail-sni:~# fetchmail -d0 -vk --sslcertck pop.gmail.com
fetchmail: WARNING:
This seems like a very appropriate candidate for skipping the normal
ageing period. We understand the problem well, it has been fixed in
Cosmic for a long time, and the Bionic source will now be identical
(apart from the changelog). And I am fairly confident there are a non-
zero number of users
Uploaded, it's in the SRU bionic queue
--
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please fix
your
Hello Hassan, or anyone else affected,
Accepted fetchmail into bionic-proposed. The package will build now and
be available at
https://launchpad.net/ubuntu/+source/fetchmail/6.3.26-3ubuntu0.1~18.04.1
in a few hours, and then in the -proposed repository.
Please help us by testing this new
Uploaded, it's in the SRU bionic queue
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please fix
your
** Changed in: fetchmail (Ubuntu Bionic)
Status: New => In Progress
** Changed in: fetchmail (Ubuntu Bionic)
Assignee: (unassigned) => Andreas Hasenack (ahasenack)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Changed in: fetchmail (Ubuntu Bionic)
Status: New => In Progress
** Changed in: fetchmail (Ubuntu Bionic)
Assignee: (unassigned) => Andreas Hasenack (ahasenack)
--
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to the bug report.
** Tags added: regression-update
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please fix
your
** Merge proposal linked:
https://code.launchpad.net/~ahasenack/ubuntu/+source/fetchmail/+git/fetchmail/+merge/368713
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve
Confirmed it's now happening in bionic, thanks for the heads up!
** Also affects: fetchmail (Ubuntu Bionic)
Importance: Undecided
Status: New
** Changed in: fetchmail (Ubuntu Bionic)
Importance: Undecided => High
--
You received this bug notification because you are a member of
Confirmed it's now happening in bionic, thanks for the heads up!
** Also affects: fetchmail (Ubuntu Bionic)
Importance: Undecided
Status: New
** Changed in: fetchmail (Ubuntu Bionic)
Importance: Undecided => High
--
You received this bug notification because you are a member of
This morning an update for openssl and libssl from 1.1.0g to 1.1.1 went
out to bionic (Ubuntu 18.04 LTS), which means bionic users are now
affected by this bug as well (given that 1.1.1 ships TLS 1.3 support,
plus the google configuration described in
** Changed in: fetchmail (Debian)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please
This bug was fixed in the package fetchmail - 6.3.26-3ubuntu0.1
---
fetchmail (6.3.26-3ubuntu0.1) cosmic; urgency=medium
* d/p/sni-support.patch: TLS: set hostname for SNI. Thanks to Matthias
Andree (LP: #1798786)
-- Karl Stenerud Wed, 24 Oct 2018
05:12:24 -0700
**
Thanks Hassan,
Updating tags per previous comment.
** Tags removed: verification-needed verification-needed-cosmic
** Tags added: verification-done verification-done-cosmic
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Hi Brian, hi folks,
The patch/new build seems to fix the issue, thanks for the fix.
fetchmail: 6.3.26 querying pop.gmail.com (protocol POP3) at Wed Nov 14 11:24:19
2018: poll completed
fetchmail: New UID list from pop.gmail.com:
fetchmail: not swapping UID lists, no UIDs seen this query
Hello Hassan, or anyone else affected,
Accepted fetchmail into cosmic-proposed. The package will build now and
be available at
https://launchpad.net/ubuntu/+source/fetchmail/6.3.26-3ubuntu0.1 in a
few hours, and then in the -proposed repository.
Please help us by testing this new package. See
Uploaded to cosmic-proposed, waiting for SRU team's inspection.
--
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided;
Uploaded to cosmic-proposed, waiting for SRU team's inspection.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please fix
This bug was fixed in the package fetchmail - 6.3.26-3ubuntu1
---
fetchmail (6.3.26-3ubuntu1) disco; urgency=medium
* d/p/sni-support.patch: TLS: set hostname for SNI. Thanks to Matthias
Andree (LP: #1798786)
-- Karl Stenerud Wed, 24 Oct 2018
05:12:24 -0700
** Changed in:
** Merge proposal linked:
https://code.launchpad.net/~kstenerud/ubuntu/+source/fetchmail/+git/fetchmail/+merge/358699
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve
** Changed in: fetchmail (Debian)
Status: Unknown => New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please fix
The upload of this fix is just waiting for the ubuntu Disco archive to
reopen after the cosmic release, as the fix needs to be applied there
first.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
The upload of this fix is just waiting for the ubuntu Disco archive to
reopen after the cosmic release, as the fix needs to be applied there
first.
--
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to the bug report.
I confirm that sslproto "TLS1" seems to be a workaround
fetchmail: Chaîne de certification, depuis la racine jusqu'au correspondant,
débutant à la profondeur 2:
fetchmail: Organisation de l'expéditeur: GlobalSign
fetchmail: Nom commun de l'émetteur : GlobalSign
fetchmail: Nom commun du sujet:
I got the problem just after updating my Raspberry PI3
OpenSSL> version
OpenSSL 1.1.1 11 Sep 2018
OpenSSL>
fetchmail, version 6.3.26+GSS+NTLM+SDPS+SSL-SSLv3+NLS+KRB5.
cat /etc/issue
Raspbian GNU/Linux 9 \n \l
--
You received this bug notification because you are a member of Ubuntu
Bugs,
Cannot confirm that this affects bionic. This may be due to openssl
1.1.0 (in bionic) sending a default SNI when none is provided, whereas
1.1.1 (in cosmic) sends nothing.
** No longer affects: fetchmail (Ubuntu Bionic)
--
You received this bug notification because you are a member of Ubuntu
** Also affects: fetchmail (Ubuntu Cosmic)
Importance: High
Assignee: Karl Stenerud (kstenerud)
Status: Fix Committed
** Changed in: fetchmail (Ubuntu Cosmic)
Status: Fix Committed => In Progress
** Also affects: fetchmail (Ubuntu Bionic)
Importance: Undecided
** Also affects: fetchmail (Ubuntu Cosmic)
Importance: High
Assignee: Karl Stenerud (kstenerud)
Status: Fix Committed
** Changed in: fetchmail (Ubuntu Cosmic)
Status: Fix Committed => In Progress
** Also affects: fetchmail (Ubuntu Bionic)
Importance: Undecided
** Description changed:
+ [Impact]
+
+ Fetchmail doesn't set hostname for SNI when using TLS. Without this,
+ fetchmail fails to verify the SSL certificate using TLS 1.2 for places
+ such as pop.gmail.com.
+
+ [Test Case]
+
+ # lxc launch ubuntu:cosmic tester
+ # lxc exec tester bash
+ # apt
** Merge proposal linked:
https://code.launchpad.net/~kstenerud/ubuntu/+source/fetchmail/+git/fetchmail/+merge/357802
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve
** Changed in: fetchmail (Ubuntu)
Assignee: (unassigned) => Karl Stenerud (kstenerud)
** Changed in: fetchmail (Ubuntu)
Status: Triaged => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
upstream patch:
https://gitlab.com/fetchmail/fetchmail/commit/9b8b634312f169fab872f3580c2febe5af031615
** Changed in: fetchmail (Ubuntu)
Status: New => Triaged
** Changed in: fetchmail (Ubuntu)
Importance: Undecided => High
** Tags added: server-next
** Bug watch added: Debian Bug
Ah, I see the other bug reports now.
--
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to fetchmail in Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please fix
your
Ah, I see the other bug reports now.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI provided; please fix
your
upstream patch:
https://gitlab.com/fetchmail/fetchmail/commit/9b8b634312f169fab872f3580c2febe5af031615
** Changed in: fetchmail (Ubuntu)
Status: New => Triaged
** Changed in: fetchmail (Ubuntu)
Importance: Undecided => High
** Tags added: server-next
** Bug watch added: Debian Bug
Thanks for filing this bug in Ubuntu.
The fetchmail package in Ubuntu is a sync from the Debian package, with
no further changes.
Do you have a sample config (minus usernames and passwords, of course)
that shows the problem? Just the sslproto setting with gmail is enough
to reproduce it?
--
Thanks for filing this bug in Ubuntu.
The fetchmail package in Ubuntu is a sync from the Debian package, with
no further changes.
Do you have a sample config (minus usernames and passwords, of course)
that shows the problem? Just the sslproto setting with gmail is enough
to reproduce it?
--
Hi Matthias,
You're right, the [sslproto "TLS1.2+"] was commented on my fetchmailrc,
but forcing the value to TLS1 solved my issue with SNI/TLS1.2.
I have found some old logs where fetchmail was working perfectly before the
upgrade to cosmic
fetchmail: 6.3.26 interroge pop.sunrise.ch
Fetchmail 6.3.26 indeed does not set the SNI. The original fetchmail
6.3.26 also does not support TLS1.2+ or thereabouts, see
https://gitlab.com/fetchmail/fetchmail/blob/legacy_63/socket.c#L906 - if
Ubuntu's shipped version does, it is not the original authentic
fetchmail 6.3.26.
--
You received
using [sslproto "TLS1"] instead of [sslproto "TLS1.2+"] seems to bypass
the issue.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798786
Title:
can't retrieve gmail emails. fetchmail: OU=No SNI
fetchmail: 6.3.26 querying pop.gmail.com (protocol POP3) at Fri Oct 19 11:58:36
2018: poll started
fetchmail: Trying to connect to 108.177.119.109/995...connected.
fetchmail: Server certificate:
fetchmail: Unknown Organization
fetchmail: Issuer CommonName: invalid2.invalid
fetchmail: Subject
51 matches
Mail list logo
