1
0
mirror of https://github.com/OfflineIMAP/offlineimap.git synced 2024-06-28 07:40:51 +02:00
offlineimap/offlineimap/repository
Sebastian 4f57b94e23 Implement SSL certificate checking
Previously, we did not check at all the authenticy and validity of
the SSL server we connected to. This is bad as it allows
man-in-the-middle attacks etc. This patch remedies the situation
somewhat.

If we specify a sslcacertfile= setting in the Repository section,
validate the server cert (on python>=2.6 or abort with python<=2.5).

As before, no certificate check is performed without that option.
In the future, the hostname check should be made optional and also
a mutt-lick "accept this certificate forever" thing should be
implemented.

Signed-off-by: Sebastian Spaeth <Sebastian@SSpaeth.de>
Signed-off-by: Nicolas Sebrecht <nicolas.s-dev@laposte.net>
2010-12-16 19:15:33 +01:00
..
__init__.py Add Gmail IMAP special support. 2008-01-03 04:56:55 +01:00
Base.py Proper error message on invalid configured repository type 2010-12-13 19:51:41 +01:00
Gmail.py make the trash and spam folder names in Gmail accounts configurable 2008-08-13 00:03:13 -05:00
IMAP.py Implement SSL certificate checking 2010-12-16 19:15:33 +01:00
LocalStatus.py Added ability to disable fsync() 2008-08-02 14:55:08 -05:00
Maildir.py Added ability to disable fsync() 2008-08-02 14:55:08 -05:00