[Python-Dev] TLS issue (unknown CA) on test_imaplib

[Victor Stinner]

Hi,

test_imaplib is starting to fail randomly causing CI tests to fail and
buildbots to fail randomly:
http://bugs.python.org/issue30175

Can somone please take a look to help me to fix this issue which
becomes blocking?

test.test_imaplib.RemoteIMAP_SSLTest.test_logincapa_with_client_certfile()
fails with:

ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:749)

RemoteIMAP_SSLTest uses the cyrus.andrew.cmu.edu server with the port 993.

Certificate chain:

 0 s:/C=US/postalCode=15213/ST=PA/L=Pittsburgh/street=5000
Forbes/O=Carnegie Mellon University/OU=Carnegie Mellon
University/OU=Multi-Domain SSL/CN=cyrus.andrew.cmu.edu
   i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA
Limited/CN=COMODO RSA Organization Validation Secure Server CA
 1 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA
Limited/CN=COMODO RSA Organization Validation Secure Server CA
   i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA
Limited/CN=COMODO RSA Certification Authority
 2 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA
Limited/CN=COMODO RSA Certification Authority
   i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust
External CA Root
 3 s:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust
External CA Root
   i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust
External CA Root

Note: Would it be possible to setup an IMAP server on pythontest.net
instead of using a server of an university? http://www.cmu.edu/

Victor