Re: [fetchmail-devel] Workaround for unavoidable SSL CommonName mismatch?

[Daniel R. G. <sk...@iS...>]

I've gone ahead and put together a preliminary patch, against the SVN code. 
This implements a new keyword: "sslcommonname". (Forget my earlier 
suggestion of "sslalternate"---I wasn't thinking straight when I made it :]

The approach I took was basically to find all instances of 
"sslfingerprint", and implement the new keyword similarly at each turn
(which turned out to be quite easy). On the downside, you can only specify 
one CommonName, whereas I had originally envisioned allowing many.

You'll notice that the critical bits are in driver.c, imap.c and pop3.c, 
before and when the call to SSLOpen() is made. Everything else is 
supporting boilerplate.

Please let me know how this patch looks, and if it looks good, I'll flesh 
it out (with deltas on the man page and documentation) for submission.


--Daniel


-- 
NAME   = Daniel Richard G.       ##  Remember, skunks       _\|/_  meef?
EMAIL1 = sk...@is...        ##  don't smell bad---    (/o|o\) /
EMAIL2 = sk...@al...      ##  it's the people who   < (^),>
WWW    = http://www.******.org/  ##  annoy them that do!    /   \
--
(****** = site not yet online)