[imapfilter-devel] ATTENTION: SSL/TLS certificate fingerprint mismatch

[Michal Kolodziejczyk]

On 07.06.2011 14:37, Spam wrote:
> Hello,
> 
> Our IT department recently migrated the e-mail infrastructure to Microsoft Exchange 2010.
> 
> Ever since, I have troubles with imapfilter 2.2.2-1 on Debian GNU/Linux filtering incoming mails to different subfolders. imapfilter exits with error code 5 ("imapfilter: certificate mismatch in non-interactive mode").
> 
> I was able to narrow down the problem to server key fingerprints constantly switching between two values:
> 
> 1) CD:10:34:E9:6D:1D:07:09:3D:9E:53:FC:B5:94:B0:10
> 2) 6D:D9:E8:FF:A3:70:2A:D8:44:10:0C:7D:0E:94:65:FC
> 
> The first fingerprint is received when imapfilter is run interactively. I accept the certificate permanently to be able to run imapfilter with a cron job:

I think you have to accept both of the certificates. So run imapfilter a
few times in interactive mode, and accept permanently any new
certificate (could be more than 2 - depends on how many exchange servers
are load balanced). You can verify the number of certificates remembered
by checking your "certificates" file.

You would need to repeat this procedure every time there is a new
certificate (e.g. when old certificates expire).

Regards,
miko