Re: [fetchmail-users] Invalid SSL certificate

[Matthias A. <mat...@gm...>]

Phillip Susi schrieb:
> My ISP recently migrated to a new pop server and they have not figured 
> out how to configure a proper SSL certificate.  The one that is 
> installed is a dummy test certificate which is self signed and has the 
> wrong CN.  This causes fetchmail to bail out with SSL errors.  Is there 
> a way to direct fetchmail to ignore the problems with the certificate 
> and proceed anyhow?

Omit the "sslcertck" option from command line AND .fetchmailrc file and
also omit the "sslfingerprint" option and its argument, if you use(d) it.

Without sslcertck and sslfingerprint, fetchmail should complain but
continue, but the best option is to urge them to get a proper certificate
or at least provide their root signing certficate for download.