Comment 0 for bug 1015692

Revision history for this message
Scott Moser (smoser) wrote :

Upon upgrade from 12.04 to quantal, my offlineimap configuration broke, showing messages like:

| *** Processing account Gmail
| INFO:OfflineImap:*** Processing account Gmailu
| Establishing connection to imap.gmail.com:993
| INFO:OfflineImap:Establishing connection to imap.gmail.com:993
| ERROR: Server SSL fingerprint 'f3043dd689a2e7dddfbef82703a6c65ea9b634c1'
| for hostname 'imap.gmail.com' does not match configured fingerprint.
| Please verify and set 'cert_fingerprint' accordingly if not set yet.
| INFO:OfflineImap:ERROR: Server SSL fingerprint 'f3043dd689a2e7dddfbef82703a6c65ea9b634c1'
| for hostname 'imap.gmail.com' does not match configured fingerprint.
| Please verify and set 'cert_fingerprint' accordingly if not set yet.

The fix is for the user to add an entry for 'cert_fingerprint' in the same spot as 'ssl = yes' (which is automatic if 'type = Gmail').
Ie add:
 cert_fingerprint = f3043dd689a2e7dddfbef82703a6c65ea9b634c1

So that your Repository entry looks something like:
| [Repository GmailRemote]
| type = Gmail
| # ssl = yes # this is default for gmail
| cert_fingerprint = f3043dd689a2e7dddfbef82703a6c65ea9b634c1
| remoteuser = <email address hidden>

There is some discussion at http://comments.gmane.org/gmane.mail.imap.offlineimap.general/5654 about possibly using system certificates to make such manual configuration unnecessary.

ProblemType: Bug
DistroRelease: Ubuntu 12.10
Package: offlineimap 6.5.4-2
ProcVersionSignature: Ubuntu 3.4.0-5.11-generic 3.4.0
Uname: Linux 3.4.0-5-generic x86_64
ApportVersion: 2.2.3-0ubuntu6
Architecture: amd64
Date: Wed Jun 20 12:50:06 2012
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release amd64 (20111012)
PackageArchitecture: all
ProcEnviron:
 TERM=xterm
 PATH=(custom, user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: offlineimap
UpgradeStatus: Upgraded to quantal on 2011-11-07 (226 days ago)