Re: [fetchmail-users] Error messages with fetchmail 6.3.8

[Rob M. <rob...@gm...>]

On 5/14/07, Pongthep Kulkrisada <ptk...@gm...> wrote:
> > Pongthep, the easiest way for FreeBSD installations of fetchmail is to use
> > the FreeBSD port - but your installation went apparently right anyways,
> > except for the SSL certificates.
> I dont know about SSL certificates.
> Once I just cd /usr/ports/mail/fetchmail and make install. It brought me the old version. I don't know how to use cvsup. Once I read handbook, it came with tonnes of documentation, I just don't understand only confuse I got. So I downloaded a tarball and compiled from source. I am a noobie.

Ok, simply, as root:

1) pkg_add -r cvsup-without-gui
2) cp /usr/share/examples/cvsup/ports-supfile /root
3) vi /root/ports-supfile
    (or use your favourite text editor, if you're not comfortable with any do:
        sed "s/CHANGE_THIS/cvsup3/" /root/ports-supfile > /root/my-ports-supfile
        mv /root/my-ports-supfile /root/ports-supfile
4) cvsup /root/ports-supfile

Repeat command (4) when you're expecting to install or update software
- at most daily.

I'd recommend portsnap instead personally, but cvsup is easier to get
going with initially (pre FreeBSD 6).  Don't overlook help from the
various freebsd mailing lists (including freebsd-questions) - people
there are generally helpful.

The FreeBSD manual goes into more detail:

http://www.freebsd.org/doc/handbook/ports-using.html

It is available in more than English, but I not many and I don't know
what languages you read.

> What is root certificate? please give me a bit of more details.

I'd suggest a look at the Wikipedia article for "ssl certificate" as
without knowing how much you know there's a risk of making it too
simple (and boring you) or assuming too much (and confusing you) :-)

    http://en.wikipedia.org/wiki/Ssl_certificate#Security

(very) briefly a certificate is a way of being certain that a host is
what it claims to be (eg mail.google.com).  There are different types,
with a root certificate being able of validating other certificates.

> Can you please give me a brief example of --sslcertck? I did not find it in the provided handbook or man pages.

It *is* detailed in at least the online manual:

 http://www.fetchmail.info/fetchmail-man.html

> Shall I just cd /usr/ports/security/ca-roots and make install?

Yes, but update your ports first.

> How to obtain the new version?

See the details on use of cvsup above.

-- 
                 Please keep list traffic on the list.

Rob MacGregor
      Whoever fights monsters should see to it that in the process he
        doesn't become a monster.                  Friedrich Nietzsche