Re: [fetchmail-users] Correction to example in fetchmail(1) manual page

[Matthias A. <mat...@gm...>]

Jason White <jas...@in...> writes:

> Under the description of the sslfingerprint option, an example is provided
> showing how to use openssl to extract the fingerprint.
>
> I found that the -md5 option had to be included on the openssl command line to
> obtain an MD5 fingerprint; otherwise, openssl defaulted to SHA-1. Thus the
> example should be
> openssl x509 -in cert.pem -noout -md5 -fingerprint

OpenSSL 0.9.7g's x509(1ssl) documents that the default were MD5 for
everything except DSA, which is forced to SHA1. Which OpenSSL version
are you using?

I will change the manual page nonetheless, since fetchmail itself is
hardcoded to use MD5 at this time (we'll have to change _that_ for
6.4.0, too, and offer other fingerprints).

Thank you for your report.

-- 
Matthias Andree