Re: [fetchmail-users] SSL Ceritficate errors in sendmail log

[Hannes E. <h....@gm...>]

Hi Richard,


> fetchmail: Issuer Organization: Equifax
> fetchmail: Unknown Issuer CommonName
> fetchmail: Server CommonName: pop.gmail.com
> fetchmail: pop.gmail.com key fingerprint:
> 59:51:61:89:CD:DD:B2:35:94:BB:44:97:A0:39:D5:B4
> fetchmail: Warning: server certificate verification: unable to get local
> issuer certificate


This means fetchmail cannot find Equifax's public certificate on your 
computer.


You need to either:

1. disable the certificate chain check by specifying the certificate's 
(pop.gmail.com's) fingerprint on the account using sslfingerprint, or

2. place the (equinox root) certificate in your system's certificate 
store, usually /etc/ssl, and run c_rehash (an openssl tool) there.
It is also possible to specify another directory using sslcertpath if 
you do not want to make the root equinox certificate available to all 
your users.

HTH,
-hannes