Re: ANN: getmail v. 5.9

On Thu 2019-02-07 22:01:33 +0000, Charles Cazabon wrote:
> Greetings,
>
> getmail version 5.9 has been released and is available for download
> at the usual place:
> http://pyropus.ca/software/getmail/
>
> Changes since the previous version include:
>
> Version 5.9
>     -documentation-only update; add note with workaround for Gmail SSL
>     connections with OpenSSL 1.1.1 and later.
>     -update copyright dates.

thanks for this release, Charles.  I've just uploaded it to debian unstable.

I'm a bit confused by this change to faq.txt:

+
+Errors connecting to Gmail with OpenSSL 1.1.1
+
+   If you experience connection/SSL errors connecting to Gmail servers,
+   and your OpenSSL is version 1.1.1 or higher, the problem is that Gmail
+   is failing the connection on the basis that SNI is not in use. To work
+   around the problem, add the ssl_version option to your retriever
+   configuration and specify TLS v1.2 as the protocol to use:
+[retriever]
+...
+ssl_version = tlsv1_2
+
+   tlsv1_2


i think i understand how the "ssl_version = tlsv1_2" line fits into the
getmail config.  I don't see what the "tlsv1_2" solo line is supposed to
be doing there.  Can you explain it more?

Also, why not just supply SNI if using TLS v1.3,  Rather than working
around it?  Is there a specific constraint in imaplib that prevents this?

All the best,

       --dkg

-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQTJDm02IAobkioVCed2GBllKa5f+AUCXF2gPwAKCRB2GBllKa5f
+BhVAQCg4D6MVY4De+APmGsye+E+ZRK0VT6iA4NaMXgpyQ3fjQEA2RNs1YMwBwk1
pn6/gVBdmAVIA2ugSQwnsZ8d+O4JAwE=
=cjhr
-----END PGP SIGNATURE-----