[Savannah-hackers-public] [gnu.org #1947846] Re: fencepost complains about the SSLv3

[Andrew Engelbrecht via RT]

On Mon Jun 05 08:51:32 2023, nalaginrut@gmail.com wrote:
> Well, it seems the issue of Python3.10.
> I made it work after retreating to Python2.7.
> BTW, I'm using getmail6
>
> ...
>
> SimplePOP3SSLRetriever:mulei@fencepost.gnu.org:995:
> getmailrc: socket error ([SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert
> handshake failure (_ssl.c:997))

It sounds like you may have configured getmail to use SSLv3, but Python 3.10 
may not support that old protocol.

When I run your command s_client command:

openssl s_client -connect fencepost.gnu.org:995

I see:

...
New, TLSv1.2, Cipher is AES256-GCM-SHA384
...

So newer TLS profiles should be supported by the server. Let me know if it 
still doesn't work for you.

Thanks,
Andrew