Re: [fetchmail-devel] Downloading remote server certificate for a TLS session?

[Jakob H. <jh...@pl...>]

Rob MacGregor wrote:

>> You are probably looking for
>> openssl s_client -connect your.server:pop3s
>> (or ...:pop3 -starttls pop3)
> I just tried "openssl s_client -connect my.mail.server:pop3 -starttls
> pop3" and all I get is:
> 
> connect: Connection refused
> connect:errno=61

I don't know anything about your server, but it works fine here:

$ openssl s_client -connect koi:pop3 -starttls pop3
CONNECTED(00000003)
...
+OK Dovecot ready. <...>

>> starttls works only with pop3 and smtp, though (and the smtp support is
>> lousy...).
> The recent thread was about an IMAP server that supported TLS, but
> there was no IMAPS support, and my own test suggests that the s_client
> protocol support is, well, poor.  If we're going to encourage the use

Right, but I don't hink that fetchmail is the right tool for that. On
the other hand, it's not that hard to print the certificate.

But it looks like the openssl people are working on it: 0.9.8e also
contains STARTTLS support for imap (and even handles smtp properly).