[Python-Dev] TLS issue (unknown CA) on test_imaplib

[Antoine Pitrou]

There's also a failure in test_nntplib:
https://travis-ci.org/python/cpython/jobs/226384811#L3157-L3171

Regards

Antoine.



On Thu, 27 Apr 2017 14:50:43 +0200
Victor Stinner <victor.stinner at gmail.com> wrote:
> Hi,
> 
> test_imaplib is starting to fail randomly causing CI tests to fail and
> buildbots to fail randomly:
> http://bugs.python.org/issue30175
> 
> Can somone please take a look to help me to fix this issue which
> becomes blocking?
> 
> test.test_imaplib.RemoteIMAP_SSLTest.test_logincapa_with_client_certfile()
> fails with:
> 
> ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:749)
> 
> RemoteIMAP_SSLTest uses the cyrus.andrew.cmu.edu server with the port 993.
> 
> Certificate chain:
> 
>  0 s:/C=US/postalCode=15213/ST=PA/L=Pittsburgh/street=5000
> Forbes/O=Carnegie Mellon University/OU=Carnegie Mellon
> University/OU=Multi-Domain SSL/CN=cyrus.andrew.cmu.edu
>    i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA
> Limited/CN=COMODO RSA Organization Validation Secure Server CA
>  1 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA
> Limited/CN=COMODO RSA Organization Validation Secure Server CA
>    i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA
> Limited/CN=COMODO RSA Certification Authority
>  2 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA
> Limited/CN=COMODO RSA Certification Authority
>    i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust
> External CA Root
>  3 s:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust
> External CA Root
>    i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust
> External CA Root
> 
> Note: Would it be possible to setup an IMAP server on pythontest.net
> instead of using a server of an university? http://www.cmu.edu/
> 
> Victor