Complete.Org: Mailing Lists: Archives: offlineimap: September 2007:
Re: SSL certificate verification ?
Home

Re: SSL certificate verification ?

[Top] [All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index] [Thread Index]
To: offlineimap@xxxxxxxxxxxx
Cc: intrigeri <intrigeri@xxxxxxxx>
Subject: Re: SSL certificate verification ?
From: John Goerzen <jgoerzen@xxxxxxxxxxxx>
Date: Tue, 4 Sep 2007 15:53:59 -0500

On Tue September 4 2007 10:40:29 am intrigeri wrote:
> Hello,
>
> is it possible to ask offlineimap to verify the IMAP server's SSL
> certificate against a trusted CA, in order to prevent
> man-in-the-middle attacks ?
>
> If not, I might write a patch providing such an option, if the SSL
> implementation used by offlineimap allows it.

Originally, Python's standard SSL module did not support this.  The 
non-standard ssleay module would.

If this is different today, I would welcome such a patch.

-- John



[Prev in Thread] Current Thread [Next in Thread]