Re: [fetchmail-users] Invalid SSL certificate

[Phillip S. <ps...@ir...>]

Matthias Andree wrote:
> It should complain, but continue - providing the server doesn't crash or
> abort. The fetchmail -vv --nosyslog -Nd0 output should shed some light on
> the issue.

Looks to me like the SSL layer is indeed refusing to negotiate the 
connection due to the name mismatch and self signedness of the server 
cert.  Then it looks like the server fails or something when fetchmail 
tries to fall back to non SSL mode.

fetchmail: 6.3.4 querying xxx.com (protocol POP3) at Mon 16 Jul 2007 
11:24:47 AM EDT: poll started
fetchmail: POP3< +OK POP3 server ready.
fetchmail: POP3> CAPA
fetchmail: POP3< +OK Capability list follows
fetchmail: POP3< TOP
fetchmail: POP3< USER
fetchmail: POP3< RESP_CODES
fetchmail: POP3< PIPELINING
fetchmail: POP3< EXPIRE NEVER
fetchmail: POP3< UIDL
fetchmail: POP3< STLS
fetchmail: POP3< .
fetchmail: POP3> STLS
fetchmail: POP3< +OK Begin TLS negotiation
fetchmail: Server certificate verification error: self signed 
certificate in certificate chain
fetchmail: Issuer Organization: Openwave Systems, Inc.
fetchmail: Issuer CommonName: Certificate Authority
fetchmail: Server CommonName: InterMail Test Certificate
fetchmail: Server CommonName mismatch: InterMail Test Certificate != xxx.com
fetchmail: xxx.com key fingerprint: 
3C:99:E5:5E:97:64:F8:6A:2E:3E:AE:39:9C:4A:08:26
21087:error:140943E8:SSL 
routines:SSL3_READ_BYTES:reason(1000):s3_pkt.c:1057:SSL alert number 0
fetchmail: xxx.com: opportunistic upgrade to TLS failed, trying to continue.
fetchmail: Unknown login or authentication error on xxx.com
fetchmail: socket error while fetching from ps...@xx...
fetchmail: 6.3.4 querying xxx.com (protocol POP3) at Mon 16 Jul 2007 
11:24:47 AM EDT: poll completed
fetchmail: Query status=2 (SOCKET)
fetchmail: Deleting fetchids file.
fetchmail: normal termination, status 2
fetchmail: Deleting fetchids file.