From owner-freebsd-questions@FreeBSD.ORG Mon Apr 12 11:10:37 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 55714106566B for ; Mon, 12 Apr 2010 11:10:37 +0000 (UTC) (envelope-from freebsd.user@seibercom.net) Received: from mail-vw0-f54.google.com (mail-vw0-f54.google.com [209.85.212.54]) by mx1.freebsd.org (Postfix) with ESMTP id F14DF8FC1B for ; Mon, 12 Apr 2010 11:10:36 +0000 (UTC) Received: by vws16 with SMTP id 16so254572vws.13 for ; Mon, 12 Apr 2010 04:10:36 -0700 (PDT) Received: by 10.220.127.5 with SMTP id e5mr1907492vcs.109.1271070635892; Mon, 12 Apr 2010 04:10:35 -0700 (PDT) Received: from scorpio.seibercom.net (c-67-189-160-65.hsd1.ny.comcast.net [67.189.160.65]) by mx.google.com with ESMTPS id 23sm2661439qyk.11.2010.04.12.04.10.34 (version=TLSv1/SSLv3 cipher=RC4-MD5); Mon, 12 Apr 2010 04:10:35 -0700 (PDT) Received: from scorpio.seibercom.net (localhost [127.0.0.1]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: freebsd.user@scorpio.seibercom.net) by scorpio.seibercom.net (Postfix) with ESMTPSA id 096BB22839 for ; Mon, 12 Apr 2010 07:10:33 -0400 (EDT) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.96 at scorpio.seibercom.net Date: Mon, 12 Apr 2010 07:10:32 -0400 From: Jerry To: freebsd-questions@freebsd.org Message-ID: <20100412071032.26d6cefa@scorpio.seibercom.net> In-Reply-To: <20100412095619.GA66903@aurora.oekb.co.at> References: <20100412095619.GA66903@aurora.oekb.co.at> Organization: seibercom.net X-Mailer: Claws Mail 3.7.5 (GTK+ 2.18.7; i386-portbld-freebsd7.3) Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAGFBMVEX+/v7++v6YOTrq8PCcuIX989UvOSj++v0BNCbpAAAAB3RJTUUHsQwfFzs7RBhzUQAAAhJJREFUOI1dU8GOqzAMNKIoV1bvwD1i0ysqrHplIdBrVSX7ATSbd03VVvn9tQNtQy0hjAdn7LED4AAcPtWm9RV+MPSfxhBLx9ajd6X/ngB6/mTwnRSZua7i7Ca+0ctZKo4Qmz+JY13X6I3nFZBxIYW1PbgfQ5RP8g0XlltEWGf3cV03joYpRnFbvYDKbXjZlXyyhEZA4lI+cN3NaVXE4VKjSwTExO10eTEkkJVqIAD5z0nUBQJluQDRSQjcrBiHAJxZlAH5CUMBMC7OcJ4LMQNnxhZ1HYPscMc6J4UlWRMNwzOpCcAHKSICd1EDn83abdREIbXsHkD1OinP1aCUCOEVRaa1lMcvywUWdYgk13JQUpYNKmvXQ8Kw5ML9YI5h8SakctBc7E/IYuLhYd/zZIk+1gM1vNweQBvHE0j+oYah3sMqAytQYlZk6+ANaaawJdu3OFzYGMZ3iGpa3qMlq9ZH0VZTgrCtw/ngdYkEIIpSbP1bWQAdFdX9vocBdkH2qVjVmuMu3gI5rjs814EUdrCZgWlPaxZZ3RiLFUtr+ud0PXwp2dnQSNXgePt6AZpBj6UMJ7VQkzN4utVeaSW1Dhn/kblGrKeMvNGnzwX4zuEDarYz1KdPtR60Gul0Gued+515SJXhCsl+Tx/3kY/UDvicPll9mfu50t3tvQ/thZpJYgeuwdSKNJ6tCD98MCgoxLDaPxbwqqwPWaWiAAAAAElFTkSuQmCC X-Face: "\j?x](l|]4p?-1Bf@!wN<&p=$.}^k-HgL}cJKbQZ3r#Ar]\%U(#6}'?<3s7%(%(gxJxxcR X-Face: %w26Xx*^+moP{$gQJ3pY@y!8g&-n%/zKp; aE#\*zy9L1X$QU7)|K"# QM:ob~"(eWt{P?#Ec;|v]#G"{{WZF-rt\4n1IS3I[w>Z Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Subject: Re: fetchmail - problems with ssl since upgrade to 6.3.16 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: freebsd-questions@freebsd.org List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Apr 2010 11:10:37 -0000 On Mon, 12 Apr 2010 11:56:19 +0200, Ewald Jenisch articulated: > Hi, > > Recently during portupgrades fetchmail also got upgraded to > 6.3.16. Since then I'm experiencing problems when trying to fetch > mails from a pop server via ssl. > > Here's the error message I'm getting: > > fetchmail: Issuer Organization: > fetchmail: Issuer CommonName: > fetchmail: Server CommonName: > fetchmail: key fingerprint: > fetchmail: fingerprints match. > fetchmail: Server certificate verification error: self signed > certificate 34381474120:error:14090086:SSL > routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify > failed:s3_clnt.c:1056: fetchmail: SSL connection failed. > > The above message normally indicates that the cert on the server might > have changed. This however is definitely not the case (I'm managing > the server myself). > > Asking google I found a similar report relating to fetchmail 6.3.16 > (as in my case) under Linux: > > http://bugs.archlinux.org/task/19043 > > So my questions are: > > o) Has anybody else, using fetchmail with ssl, experienced the same > problems after a recent upgrade of fetchmail under FreeBSD? > > o) Any known cure against it? > > Last but not least, here's my config: > > FreeBSD 7.3 recent as per April 09,2010. Fetchmail 6.3.16, openssl > 1.0.0 You have obfuscated all of the data so there is no way for anyone to verify your conclusions. The message indicates that you are using a self-signed certificate. That warning message is normal. Are you attempting to verify the certificate with fetchmail? If so, remove the check an retry the process. You might be better served on the fetchmail forum. -- Jerry FreeBSD.user@seibercom.net Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header. __________________________________________________________________ Anger kills as surely as the other vices.