| Subject: | Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client is deprecated |
| Date: | Wed, 07 Dec 2016 15:13:55 -0500 |
| To: | bug-Mail-IMAPClient [...] rt.cpan.org |
| From: | "Brian J. Murrell" <brian [...] interlinx.bc.ca> |
I am getting the following warning:
*******************************************************************
Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client
is deprecated! Please set SSL_verify_mode to SSL_VERIFY_PEER
together with SSL_ca_file|SSL_ca_path for verification.
If you really don't want to verify the certificate and keep the
connection open to Man-In-The-Middle attacks please set
SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.
*******************************************************************
at /usr/share/perl5/vendor_perl/Mail/IMAPClient.pm line 454.
with Mail::IMAPClieint 3.37. I'm creating my connection to the IMAP
server with:
my $imap = Mail::IMAPClient->new(
User => $opt{username},
Password => $opt{password},
Port => "143",
Peek => "1",
Debug => $debug > 1,
Uid => '0',
Clear => '5',
SSL_verify_mode => 1,
)
|| die ("Could not connect to server: $! $?\n");
$imap->Server($opt{imapserver});
$imap->connect(Starttls => 1) or die "connect failed: $@\n";
I suppose I need to set a flag to indicate that I want to verify the
certificate of the server. But I would think that in this day and age,
that verifying should be the default and one should have to set a flag
to disable verification.
Or maybe I am completely misunderstanding something.
b.
Message body not shown because it is not plain text.