Re: Bug with imap.gmail.com and getmail TLS validation
Charles Cazabon <[email protected]>
| Newsgroups | gmane.mail.getmail.user |
|---|---|
| Message-ID | <[email protected]> |
I spent a little time digging into this issue recently. RW <[email protected]> wrote: > > believe is the first version which has supported TLSv1.3. That is > > probably what has exposed this issue. > > [...] can you confirm that setting > > ssl_version = tlsv1_2 > > eliminates the problem with getmail? It appears to for me. The problem seems to be that the "traditional" way getmail is using the Python ssl module does not end up sending the SNI field in the SSL setup, and when using TLS v1.3, the Gmail servers respond with an invalid request error if SNI is not present. SNI is an extension to TLS and while I'm no SSL/TLS expert, it seems at best unfriendly behaviour for Gmail to be barfing when it's not present. I'm not sure I can cleanly work around this Gmail behaviour in getmail while maintaining backwards compatibility; even if I can, it will be a bunch of ugly code. I may just make it use TLS 1.2 instead. Charles -- ----------------------------------------------------------------------- Charles Cazabon GPL'ed software available at: http://pyropus.ca/software/ -----------------------------------------------------------------------