Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 07 Oct 2023 11:58:58 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 274324] mail/fetchmail: OpenSSL reported: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
Message-ID:  <bug-274324-7788-cEn1G4fOhK@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-274324-7788@https.bugs.freebsd.org/bugzilla/>
References:  <bug-274324-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D274324

--- Comment #4 from Michael Osipov <michael.osipov@siemens.com> ---
These are sent:
$ openssl s_client -no-CAfile -no-CApath -connect pop.gmail.com:995
CONNECTED(0000019C)
---
Certificate chain
 0 s:CN =3D pop.gmail.com
   i:C =3D US, O =3D Google Trust Services LLC, CN =3D GTS CA 1C3
 1 s:C =3D US, O =3D Google Trust Services LLC, CN =3D GTS CA 1C3
   i:C =3D US, O =3D Google Trust Services LLC, CN =3D GTS Root R1
 2 s:C =3D US, O =3D Google Trust Services LLC, CN =3D GTS Root R1
   i:C =3D BE, O =3D GlobalSign nv-sa, OU =3D Root CA, CN =3D GlobalSign Ro=
ot CA
---

Make sure that every single one (GTS CA 1C3, GTS Root R1, GlobalSign Root C=
A)
is in your trust since the code does not use/set X509_V_FLAG_PARTIAL_CHAIN.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-274324-7788-cEn1G4fOhK>