{"action":"reopened","issue":{"url":"https://api.github.com/repos/OfflineIMAP/offlineimap/issues/548","repository_url":"https://api.github.com/repos/OfflineIMAP/offlineimap","labels_url":"https://api.github.com/repos/OfflineIMAP/offlineimap/issues/548/labels{/name}","comments_url":"https://api.github.com/repos/OfflineIMAP/offlineimap/issues/548/comments","events_url":"https://api.github.com/repos/OfflineIMAP/offlineimap/issues/548/events","html_url":"https://github.com/OfflineIMAP/offlineimap/issues/548","id":321884398,"number":548,"title":"Does not check SSL Certificate Revocation Status","user":{"login":"velleto","id":28145811,"avatar_url":"https://avatars2.githubusercontent.com/u/28145811?v=4","gravatar_id":"","url":"https://api.github.com/users/velleto","html_url":"https://github.com/velleto","followers_url":"https://api.github.com/users/velleto/followers","following_url":"https://api.github.com/users/velleto/following{/other_user}","gists_url":"https://api.github.com/users/velleto/gists{/gist_id}","starred_url":"https://api.github.com/users/velleto/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/velleto/subscriptions","organizations_url":"https://api.github.com/users/velleto/orgs","repos_url":"https://api.github.com/users/velleto/repos","events_url":"https://api.github.com/users/velleto/events{/privacy}","received_events_url":"https://api.github.com/users/velleto/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2018-05-10T10:28:54Z","updated_at":"2018-05-11T06:49:14Z","closed_at":null,"author_association":"NONE","body":"#### General informations\r\n\r\nOfflineIMAP still syncs with mail server, even if their SSL certificate has been revoked. \r\nI realise that this may expected behavior, or be the fault of my poor configuration of SSL features (below). \r\n\r\nI stumbled across this, when my university changed their certificates and had revoked ones online for a short maintenance time frame. When the new ones were installed, OfflineIMAP refused to connect, as the fingerprint had changed (as expected and documented).\r\n\r\n- system/distribution (with version): Ubuntu 17.10/ Ubuntu 18.04\r\n- offlineimap version (`offlineimap -V`): offlineimap v7.1.5, imaplib2 v2.57 (system), Python v2.7.15rc1, OpenSSL 1.1.0g  2 Nov 2017\r\n\r\n#### Configuration file offlineimaprc\r\n```\r\n[general]\r\n\r\nmetadata = somepath/metadata\r\npythonfile = somepath/offlineimap.py\r\n\r\naccounts = email\r\n\r\n[Account email]\r\nlocalrepository     = email-local\r\nremoterepository    = email-remote\r\n\r\n[Repository email-local]\r\ntype                = Maildir\r\nlocalfolders        = somepath/myemail@domain.tld/mailbox\r\n\r\n[Repository email-remote]\r\ntype                = IMAP\r\nremotehost          = mail.domain.tld\r\nremoteuser          = myemail\r\nremotepasseval      = keychain(\"myemail@domain.tld\")\r\n\r\nssl                 = yes\r\nsslcacertfile       = /etc/ssl/certs/ca-certificates.crt\r\ncert_fingerprint    = 21987e2442191dc606f25fdfc7dce6091416b74a\r\n\r\nmaxconnections      = 3\r\nholdconnectionopen  = true\r\ncreatefolders       = false\r\n\r\n```\r\n#### pythonfile (if any)\r\n\r\n```\r\nIrrelevant to issue.\r\n```\r\n\r\n#### Logs, error\r\n\r\n```\r\nNone.\r\n```\r\n\r\n#### Steps to reproduce the error\r\n\r\n- This is somewhat difficult for me to reproduce, as I don't have a mail server with a revoked certificate."}}
{"actor":{"display_login":"nicolas33"}}