From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gentoo-user+bounces-163468-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
	by finch.gentoo.org (Postfix) with ESMTP id 55D9C138825
	for <garchives@archives.gentoo.org>; Thu,  2 Apr 2015 04:52:29 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id 6A6F3E09C6;
	Thu,  2 Apr 2015 04:52:23 +0000 (UTC)
Received: from mail-lb0-f172.google.com (mail-lb0-f172.google.com [209.85.217.172])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by pigeon.gentoo.org (Postfix) with ESMTPS id 593A0E08CD
	for <gentoo-user@lists.gentoo.org>; Thu,  2 Apr 2015 04:52:22 +0000 (UTC)
Received: by lbbug6 with SMTP id ug6so51304000lbb.3
        for <gentoo-user@lists.gentoo.org>; Wed, 01 Apr 2015 21:52:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=message-id:date:from:to:subject:in-reply-to:references:mime-version
         :content-type:content-transfer-encoding;
        bh=nb5x0Q/obXdTx1gkAik6PlB0hpddqxkvKK/o0duulaY=;
        b=fP6deaOVicfv1rvr2S42KUPou6ni79VSWDuIo5dc0udFDLXvKtPs3BXS3sOuGLr6dd
         4xsR3UGKun5o7tvk9cbUhEM8uhO5vUz91xKfV/BFNnTxxXuxF8tLXGXO+PQ0y8CvU9d5
         mKC7zi3Je89VC8hm99gCbhg4HLr4ucx5eduIb2cEMNT7IFQ11z1KXLuhOeUCLTfZRUL5
         QMMROXVL5n+sXT7+aVSSlxqHeZd/Q5JHxw6gsu9jBGc365oK3r6da/8dEcJTkQECgjcN
         Xajgzh0t9AUgxGpVV6N+LjBiNIdMOrK28YDf5wZaefYyGKe3WrtNbRJ7BhNCn5M5Dbun
         JUnQ==
X-Received: by 10.152.5.134 with SMTP id s6mr29477777las.6.1427950340904;
        Wed, 01 Apr 2015 21:52:20 -0700 (PDT)
Received: from cosmo ([178.214.192.160])
        by mx.google.com with ESMTPSA id lf1sm803756lab.42.2015.04.01.21.52.20
        for <gentoo-user@lists.gentoo.org>
        (version=SSLv3 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
        Wed, 01 Apr 2015 21:52:20 -0700 (PDT)
Message-ID: <551ccb04.e178980a.629f.3b79@mx.google.com>
Date: Thu, 2 Apr 2015 07:50:48 +0300
From: Gevisz <gevisz@gmail.com>
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] [OT] Strange behaviour of google certificates.
In-Reply-To: <20150402041740.7b79c359@hal9000.localdomain>
References: <551c290c.08cd700a.0b06.1f04@mx.google.com>
	<20150402041740.7b79c359@hal9000.localdomain>
Precedence: bulk
List-Post: <mailto:gentoo-user@lists.gentoo.org>
List-Help: <mailto:gentoo-user+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-user+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-user+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-user.gentoo.org>
X-BeenThere: gentoo-user@lists.gentoo.org
Reply-to: gentoo-user@lists.gentoo.org
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Archives-Salt: 127f53d9-a822-408a-a019-42e31dd07898
X-Archives-Hash: e9288d31c28ae759e0aa2c918b0c0e80

On Thu, 2 Apr 2015 04:17:40 +0200 <wabenbau@gmail.com> wrote:

> Gevisz <gevisz@gmail.com> wrote:
> 
> > This question does specifically relates to Gentoo distribution
> > but, as far as I have not subscribed to any other mailing list,
> > I dare to ask it here.
> > 
> > So, I am using Claws Mail that downloads e-mails from several
> > google mail accounts (all are mine :) and about once or twice
> > in a month get into the situation when Claws asks me to verify
> > and change the google certificates, first in one direction and
> > soon after that (usually during the next downloading of my e-mails)
> > - in another.
> > 
> > The situation is illustrated by the 2 message screenshots that are
> > attached to this e-mail.
> > 
> > The strange thing for me is that, first, the Claws asks me to verify
> > and accept a newer certificate complaing that the old one is in some
> > aspect "bad", and soon after that it complains about a newer
> > certificate and asks me to verify and and accept the older one.
> > 
> > I suspect that it is google that makes something wrong here.
> > 
> > What do you think?
> 
> Im using fetchmail on a separate server to receive my mail. I had to
> deactivate fetchmails ssl fingerprint checks for my google accounts,
> because the certificates are changing frequently. I don't know the
> reason for these changes but as I use my google accounts only for some
> mailing lists and because I'm a lazy guy I don't care much about that
> and never done a research.

Thank you for the reply. So, I am not alone. :)

> But please tell me if you find out the reason. :-)

Ok, but I am far not an expert on networking.