From: Simon B. <ba...@Fr...> - 2005-12-10 20:04:27
|
Rob MacGregor wrote: > On 10/12/05, Simon Barner <ba...@fr...> wrote: > > > > The patch is included in fetchmail-6.3.0_1. Thanks for the quick fix, > > Matthias! > > Only problem is - it doesn't really fix anything without some other > finger waving. > > Poking around, using truss etc, I discovered that the base libraries > look in /etc/ssl/certs, the version of c_rehash (that doesn't get > installed) that hides in the source tree looks in /usr/local/ssl/certs > and the ports version of openssl looks in /usr/local/openssl/certs. > > In short, a bit of a mess :-) > > So, the only way to get it to work is to point /etc/ssl/certs at > /usr/local/openssl/certs and use the c_rehash that comes with the port > (but given the version differences, I doubt that's a good idea, even > if it's what I've done). Or to edit and install the c_rehash that > comes with the source tree, but doesn't get installed (and create the > top level directory required). The security/ca-roots port creates a link from /etc/ssl/cert.pem -> /usr/local/share/certs/ca-root.crt I've just verified that fetchmail picks up those certificates if they are installed onto a pristine /etc/ssl. I'll think about adding a dependency in fetchmail. > > I'm happy to raise a PR about this as I'd like to see this easier for > others to get working - FreeBSD really shouldn't be this hard, that's > what Linux is for :-) > > -- > Please keep list traffic on the list. > Rob MacGregor > Whoever fights monsters should see to it that in the process he > doesn't become a monster. Friedrich Nietzsche -- Best regards / Viele Grüße, ba...@Fr... Simon Barner ba...@gm... |