Re: [fetchmail-users] Invalid SSL certificate

[Matthias A. <mat...@gm...>]

Phillip Susi schrieb:

> Looks to me like the SSL layer is indeed refusing to negotiate the 
> connection due to the name mismatch and self signedness of the server 
> cert.  Then it looks like the server fails or something when fetchmail 
> tries to fall back to non SSL mode.
> 
> fetchmail: 6.3.4 querying xxx.com (protocol POP3) at Mon 16 Jul 2007 
> 11:24:47 AM EDT: poll started
...
> fetchmail: POP3< .
> fetchmail: POP3> STLS
> fetchmail: POP3< +OK Begin TLS negotiation
...
> fetchmail: xxx.com: opportunistic upgrade to TLS failed, trying to continue.
> fetchmail: Unknown login or authentication error on xxx.com
> fetchmail: socket error while fetching from ps...@xx...
> fetchmail: 6.3.4 querying xxx.com (protocol POP3) at Mon 16 Jul 2007 
> 11:24:47 AM EDT: poll completed
> fetchmail: Query status=2 (SOCKET)

See the socket error? Apparently the server drops the connection.

Try 6.3.8 - the non-SSL fallback is fixed there (at the expense of not
encrypting the connection though, so don't do that over WLAN with just WEP
or via public access networks).

HTH
Matthias