Filtering at pop.gmail.com doesn't work

[riesebie]

I enabled pop on Port 995 at gmail. 2FA password is generated and works well fetching mails with getmail6. Running mailfilter -r -M mailfilterrc gives

Aug 16 14:18:52 mailfilter: 0.8.8 querying me@gmail.com@pop.gmail.com.
Aug 16 14:18:53 mailfilter: Error: SSL connection could not be established: self-signed certificate
Aug 16 14:18:53 mailfilter: Error: SSL connection could not be established.
Aug 16 14:18:53 mailfilter: Error: Could not establish network connection.

mailfilterrc:

SERVER="pop.gmail.com"                                                                                                                                                                                                                      
USER="me@gmail.com"                                                                                                                                                                                                                     
PASS="blafasel"                                                                                                                                                                                                                     
PROTOCOL="pop3/ssl"                                                                                                                                                                                                                         
PORT=995

Which cert does mailfilter use?

Thanks in advance

[riesebie]

BTW, 0.8.7 works well.

[nondeterministic]

0.8.7 works because it does NO certificate checking. Could you try running mailfilter with -s switch and see if it works, i.e., when certificate checking is disabled? I also have a gmail account somewhere and could run some tests with it. Thanks for reporting!

[riesebie]

mailfilter -r -s -M mailfilterrc
Aug 16 20:12:10 mailfilter: 0.8.8 querying me@gmail.com@pop.gmail.com.
Aug 16 20:12:10 mailfilter: Error: SSL connection could not be established: self-signed certificate
Aug 16 20:12:10 mailfilter: Error: SSL connection could not be established.
Aug 16 20:12:10 mailfilter: Error: Could not establish network connection.
Aug 16 20:12:10 mailfilter: Error: Skipping account me@gmail.com@pop.gmail.com due to earlier errors.

Thanks for investigation!

[nondeterministic]

OK, I can reproduce the error. That's a start... I'll keep you posted here.

[nondeterministic]

@riesebie are you in a position to try and run the current master? My latest commit adds so called SNI support, which apparently Google and other servers need. I think, it fixes the problem.

[riesebie]

@nondeterministic master runs fine :-)

[nondeterministic]

Many thanks, will close this issue now. After investigating the other open issue(s), I shall release 0.8.9, and we simply forget that 0.8.8 ever existed. ;-)

[riesebie]

@nondeterministic I filed a Release Critical bug at Debian Bug 1018713. After some time mailfilter will be removed from distribution excepting it will be fixed. So I need an official version 0.8.9. Don't get hurry. We have enough time :wink:

[nondeterministic]

I've just uploaded an attempt to fix the gentoo build issues to master. I hope @hhoffstaette can help me verify that they are, indeed, fixing the issues. Then, we can release, I guess.