Re: [fetchmail-users] Invalid SSL certificate

[Matthias A. <mat...@gm...>]

Phillip Susi schrieb:
> Matthias Andree wrote:
>> Omit the "sslcertck" option from command line AND .fetchmailrc file and
>> also omit the "sslfingerprint" option and its argument, if you use(d) it.
> 
> I don't use these options.  Is there a way to explicitly negate those
> options?

No need, these are disabled by default.

> It is a self signed certificate and I even tried capturing the
> certificate using openssl s_connect, following the instructions I found
> at http://www.dns.net/andras/computer/ssl-fetchmail.html, but fetchmail
> still errors out because the CN does not match the hostname.

It should complain, but continue - providing the server doesn't crash or
abort. The fetchmail -vv --nosyslog -Nd0 output should shed some light on
the issue.

HTH
Matthias