Re: [fetchmail-devel] Downloading remote server certificate for a TLS session?

[Rob M. <rob...@gm...>]

On 8/22/07, Jakob Hirsch <jh...@pl...> wrote:
>
> You are probably looking for
> openssl s_client -connect your.server:pop3s
> (or ...:pop3 -starttls pop3)

I just tried "openssl s_client -connect my.mail.server:pop3 -starttls
pop3" and all I get is:

connect: Connection refused
connect:errno=61

But it's a TLS capable server.  Running the relevant command against
the pop3s service works fine.

> starttls works only with pop3 and smtp, though (and the smtp support is
> lousy...).

The recent thread was about an IMAP server that supported TLS, but
there was no IMAPS support, and my own test suggests that the s_client
protocol support is, well, poor.  If we're going to encourage the use
of SSL/TLS (which we do by the fact that fetchmail will use TLS if
it's available) then we need to make it easy for people to import
certificates.

-- 
                 Please keep list traffic on the list.

Rob MacGregor
      Whoever fights monsters should see to it that in the process he
        doesn't become a monster.                  Friedrich Nietzsche