Add option to verify fingerprint and certificate chain

OfflineIMAP / offlineimap

Read/sync your IMAP mailboxes (python2) [LEGACY: move to offlineimap3]

http://www.offlineimap.org

Other

1.78k stars 360 forks source link

Add option to verify fingerprint and certificate chain #221

Closed mathstuf closed 9 years ago

mathstuf commented 9 years ago

It would be nice to verify both the chain and the fingerprint. AFAICT, checking the fingerprint does not check the expiration date of the remote certificate (seeing as I just went through and regenerated certs which were being accepted even though they expired in April).

I didn't see this with offlineimap itself, but vdirsyncer which based its handling off of offlineimap (see untitaker/vdirsyncer#245).

mathstuf commented 9 years ago

Oops, this is already done in offlineimap. Got too carried away :) .