Configuring offlineimap for gmail: SSL error

Put entry:

sslcacertfile = /etc/ssl/certs/ca-certificates.crt

In section:

[Repository Remote]

In order for OfflineIMAP to use the system’s default CA roots file put the line

sslcacertfile = OS-DEFAULT

in the [Repository $remoterepository] section of your OfflineIMAP config file.

The relevant documentation from offlineimap.conf reads:

Special value OS-DEFAULT makes Offlineimap to automatically determine system-wide location of standard trusted CA roots file for known OS distributions and use the first bundle encountered (if any).

For FreeBSD install the port security/ca_root_nss

and then add

sslcacertfile = /usr/local/share/certs/ca-root-nss.crt