[fetchmail-devel] Downloading remote server certificate for a TLS session?

[Rob M. <rob...@gm...>]

I was thinking about the recent thread that Anne Wilson started about
TLS certificate problems.  While there's a fairly easy way of getting
SSL certificates, there doesn't seem to be any way to use OpenSSL to
get a certificate from a TLS session.

As a generic solution it would be useful IMO if, at a high enough
verbosity (maybe -vvvv) fetchmail would display the certificate of the
remote TLS/SSL server *if that certificate can't be verified*.

Would that be reasonable, and easy to achieve?  If not is there any
other tool that can be used to get the certificate for a TLS secured
POP3 or IMAP server?

-- 
                 Please keep list traffic on the list.

Rob MacGregor
      Whoever fights monsters should see to it that in the process he
        doesn't become a monster.                  Friedrich Nietzsche