Re: Bug with imap.gmail.com and getmail TLS validation
Charles Cazabon <[email protected]>
| Newsgroups | gmane.mail.getmail.user |
|---|---|
| Message-ID | <[email protected]> |
Daniel Kahn Gillmor <[email protected]> wrote: > > Thanks. I've just crafted the following (lightly-tested) patch, Would you mind not distributing this yet? I *really* dislike the support burden that results from having different options and patches in upstream vs various distributors' versions. The entire reason I posted that test script was to gather information so I could try to determine if it was safe to just unconditionally use SNI when support for it is present; I have no intention (as I mentioned elsewhere in this thread) of adding a `use_sni` option which 99% of users will not understand. There's already way too much cargo-cult software configuration in the world. If you're looking for a short-term workaround, tell people to set the SSL version to TLS 1.2 or below, as also posted elsewhere in this thread. Charles -- ----------------------------------------------------------------------- Charles Cazabon GPL'ed software available at: http://pyropus.ca/software/ -----------------------------------------------------------------------