On 10/23/10 23:45, Nathan Stratton Treadway wrote:
On Sat, Oct 23, 2010 at 20:54:39 -0600, Joseph wrote:
If I comment-out the last two lines:
sslcertck
sslcertpath /etc/ssl/certs/
it complains on certificate but I can fetch the mail.
Yes, by removing the "sslcertck" you're letting fetchmail continue with
the session even though it isn't able to verify the certificate chain.
Here's where the /etc/ssl/certs are from:
$ equery belongs /etc/ssl/certs/
[ Searching for file(s) /etc/ssl/certs in *... ]
dev-libs/openssl-1.0.0a-r3 (/etc/ssl/certs)
Well, there's half my theory confirmed: your OpenSSL tools are v1.0.0.
What does
ldd $(which fetchmail)
show for the libssl library?
Nathan
SOLVED!
I'm using openssl-1.0.0a-r3
I rebuild openssl, all hashes were rebuild, in addition I've reinstall "fetchmail"
and I think this solved the problem.
When I pull the mail I no don't get any certificate errors.
So I suspect that fetchmail lost something during all those re-installed on
Gentoo :-/
Thank you to all to contributed!
--
Joseph