From: Phillip S. <ps...@ir...> - 2007-07-13 18:47:18
|
Matthias Andree wrote: > Omit the "sslcertck" option from command line AND .fetchmailrc file and > also omit the "sslfingerprint" option and its argument, if you use(d) it. I don't use these options. Is there a way to explicitly negate those options? > Without sslcertck and sslfingerprint, fetchmail should complain but > continue, but the best option is to urge them to get a proper certificate > or at least provide their root signing certficate for download. It is a self signed certificate and I even tried capturing the certificate using openssl s_connect, following the instructions I found at http://www.dns.net/andras/computer/ssl-fetchmail.html, but fetchmail still errors out because the CN does not match the hostname. |