1
0
mirror of https://github.com/OfflineIMAP/offlineimap.git synced 2024-06-28 07:40:51 +02:00
offlineimap/offlineimap
Eygene Ryabinkin f69613965f Make OS-default CA certificate file to be requested explicitely
This simplifies logics for the user, especially if he uses both
fingerprint and certificate validation: it is hard to maintain
the compatibility with the prior behaviour and to avoid getting
default CA bundle to be disabled when fingerprint verification
is requested.

See
  http://thread.gmane.org/gmane.mail.imap.offlineimap.general/6695
for discussion about this change.

Default CA bundle is requested via 'sslcertfile = OS-DEFAULT'.

I had also enforced all cases where explicitely-requested CA bundles
are non-existent to be hard errors: when users asks us to use CA
bundle (and, thus, certificate validation), but we can't find one,
we must error out rather than happily continue and downgrade to
no validation.

Reported-By: Edd Barrett <edd@theunixzoo.co.uk>
Reviewed-By: Nicolas Sebrecht <nicolas.s-dev@laposte.net>
Signed-off-by: Eygene Ryabinkin <rea@codelabs.ru>
2015-01-18 22:05:49 +03:00
..
folder Fix regression introduced in 0f40ca4799 2015-01-12 19:55:05 +01:00
repository Make OS-default CA certificate file to be requested explicitely 2015-01-18 22:05:49 +03:00
ui ui: Machine: remove offending param for a _printData() call 2015-01-10 12:36:18 +01:00
utils Make OS-default CA certificate file to be requested explicitely 2015-01-18 22:05:49 +03:00
__init__.py v6.5.7-rc1 2015-01-07 22:20:14 +01:00
accounts.py more style consistency 2015-01-13 18:16:25 +01:00
CustomConfig.py Properly re-raise exception to save original tracebacks 2015-01-12 17:51:21 +03:00
emailutil.py more style consistency 2015-01-08 23:36:19 +01:00
error.py more consistent style 2015-01-07 21:31:43 +01:00
globals.py Create global instance of command-line options 2013-02-11 23:34:18 +04:00
imaplib2.py Imaplib2: trade backticks to repr() 2014-11-02 10:35:43 +03:00
imaplibutil.py Properly re-raise exception to save original tracebacks 2015-01-12 17:51:21 +03:00
imapserver.py Make OS-default CA certificate file to be requested explicitely 2015-01-18 22:05:49 +03:00
imaputil.py more style consistency 2015-01-08 23:36:19 +01:00
init.py more style consistency 2015-01-13 18:16:25 +01:00
localeval.py localeval: avoid redefining 'file' keyword 2015-01-14 17:18:48 +01:00
mbnames.py more consistent style 2015-01-07 21:31:43 +01:00
syncmaster.py
threadutil.py Fix deadlock for IMAP folder synced in singlethreaded mode 2013-02-05 07:53:25 +04:00