Re: [fetchmail-devel] SVN SSL problem?

[Brian C. <B.C...@po...>]

On Sun, Sep 12, 2004 at 12:27:10PM -0400, Rob Funk wrote:
> I just tried to update my local copy of the fetchmail repository, and got 
> this error:
> 
> svn: PROPFIND request failed on '/svn/fetchmail/trunk'
> svn: PROPFIND of '/svn/fetchmail/trunk': SSL negotiation failed: SSL error: 
> sslv3 alert bad certificate (https://decoy.wox.org)
> 
> Did I miss a change?

$ openssl s_client -connect decoy.wox.org:443
CONNECTED(00000003)
depth=1 /C=US/ST=Texas/L=Dallas/O=decoy.wox.org/CN=Certificate authority/emailAddress=ca...@de...
verify error:num=19:self signed certificate in certificate chain
verify return:0
15428:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:1052:SSL alert number 40
15428:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s23_lib.c:226:
$ 

So this server, whatever it is, is badly broken. (openssl s_client is
normally quite happy to connect to sites with self-signed certificates)

Regards,

Brian.