From owner-freebsd-questions@FreeBSD.ORG Sun Aug 15 22:35:06 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 47C871065696 for ; Sun, 15 Aug 2010 22:35:06 +0000 (UTC) (envelope-from mla_strick@att.net) Received: from smtp127.sbc.mail.sp1.yahoo.com (smtp127.sbc.mail.sp1.yahoo.com [69.147.65.186]) by mx1.freebsd.org (Postfix) with SMTP id 0F2948FC14 for ; Sun, 15 Aug 2010 22:35:05 +0000 (UTC) Received: (qmail 52597 invoked from network); 15 Aug 2010 22:35:05 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1281911705; bh=Tm7tXJyo9+D6aX7nTfIwFbcUAhQdvRLmrIviZc6eNXc=; h=Received:X-Yahoo-SMTP:X-YMail-OSG:X-Yahoo-Newman-Property:Received:Received:Date:From:Message-Id:To:Subject:Cc; b=en9iq8furh4C51bgAkWFQTjv2BfvADR1TUVWRNnsK3J7r7J0Cbuewn1CkqiKMnPE6bsFrIJGtgBMdwEz7nRho2TdQa+PAXpqrnkLtusAGX/No6F3EslfmhVfq1ucfNFzQAzf9ZkfD21n1zzoHdngZFMITAm2uorFXiak3nFAnwY= Received: from mist.nodomain (mla_strick@69.228.206.173 with login) by smtp127.sbc.mail.sp1.yahoo.com with SMTP; 15 Aug 2010 15:35:04 -0700 PDT X-Yahoo-SMTP: ppEzeiKswBBq7wHVNDEiPbPsAwzyGELyRI8IdiDYGqsxaD5uQA-- X-YMail-OSG: M30ZO.EVM1mEoVr8PwllEursXs9q07aOYOWTkQ7Xh1XfM0C ckk7wqxH32YNZwEdg7sfKh5oNzer4RzS.yDR2CyPcUoC5dUgd28PzrPEMD5. lxRI_q5VZe.GnlHd8a.Lwqg86Z0v6t7qSsa5yw1sAUS7Y2PUXMSLQ3.OAail q0xiS9am8LvNIqDQkBLIsVvyVAl8NC6ai0iCgshs9WY1JBdnLc0JJp8pR278 OdNOXDFLpuUV5GP9VaVo6OE0rFwY7 X-Yahoo-Newman-Property: ymail-3 Received: from mist.nodomain (localhost [127.0.0.1]) by mist.nodomain (8.14.4/8.14.4) with ESMTP id o7FMZ2Vf049723; Sun, 15 Aug 2010 15:35:04 -0700 (PDT) (envelope-from mla@mist.nodomain) Received: (from dan@localhost) by mist.nodomain (8.14.4/8.14.4/Submit) id o7FMZ2X2049722; Sun, 15 Aug 2010 15:35:02 -0700 (PDT) (envelope-from mla) Date: Sun, 15 Aug 2010 15:35:02 -0700 (PDT) From: Dan Strick Message-Id: <201008152235.o7FMZ2X2049722@mist.nodomain> To: freebsd-questions@freebsd.org X-Mailman-Approved-At: Sun, 15 Aug 2010 23:57:45 +0000 Cc: mla@mist.nodomain Subject: Re: fetchmail ssl certificate verification problem in FreeBSD 8.1 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 15 Aug 2010 22:35:06 -0000 On Sun, 15 Aug 2010 22:36, Erik Norgaard wrote: > A little bit of searching around I found this (I don't know since when): > > # less /usr/src/crypto/openssl/certs/README.RootCerts > The OpenSSL project does not (any longer) include root CA certificates. > > Please check out the FAQ: > * How can I set up a bundle of commercial root CA certificates? > > The FAQ is here: > > /usr/src/crypto/openssl/FAQ That explains the problem. I copied the file /usr/local/share/certs/ca-root-nss.crt from my old FreeBSD release-8.0 system and hooked it up to fetchmail with the fetchmail sslcertfile option. At least fetchmail is now happy. Thanks for the help, Dan Strick