[fetchmail-users] unable to get local issuer certificate

[Tim J. <ti...@ak...>]

FYI: Linux user, setting up on Mac Lion (Darwin Kernel Version
11.2.0). Comfortable with command line, but not a virtuoso, new to
Mac.

When attempting to fetch mail for pop.gmail.com the following error
messages are generated :
####################################################################
fetchmail: Server certificate verification error: unable to get local issuer
certificate fetchmail: This means that the root signing certificate (issued for
/C=US/O=Google Inc/CN=Google Internet Authority) is not in the trusted CA
certificate locations, or that c_rehash needs to be run on the certificate
directory. For details, please see the documentation of --sslcertpath and
--sslcertfile in the manual page.  fetchmail: Certificate/fingerprint
verification was somehow skipped!  fetchmail: SSL connection failed.
fetchmail: socket error while fetching from tim...@po... fetchmail:
6.3.18 querying pop.gmail.com (protocol POP3) at Sun, 16 Oct 2011 10:20:39
-0800 (AKDT): poll completed fetchmail: Query status=2 (SOCKET)
####################################################################
cert files are in /Users/tim/.certs
Two files were created from 
openssl s_client -connect pop.gmail.com:995 -showcerts
1)gmail.pem = google cert
2)equifax.pem = equifax cert
c_rehash was run after certificates were installed.
permissions :
  cert files are 644 tim:staff
  cert directory is 755

Polling code in .fetchmailrc is

poll pop.gmail.com with proto POP3 user '*********' there with
password '******' is 'tim' here mda "/usr/bin/procmail" options ssl
sslcertck sslcertpath /Users/tim/.certs

Entry from fetchmail -V :
#####################################################################################
Options for retrieving from *********@pop.gmail.com:
  True name of server is pop.gmail.com.
  Protocol is POP3.
  All available authentication methods will be tried.
  SSL encrypted sessions enabled.
  SSL server certificate checking enabled.
  SSL trusted certificate directory: /Users/tim/.certs
  Server nonresponse timeout is 300 seconds (default).
  Default mailbox selected.
  Only new messages will be retrieved (--all off).
  Fetched messages will not be kept on the server (--keep off).
  Old messages will not be flushed before message retrieval (--flush off).
  Oversized messages will not be flushed before message retrieval (--limitflush off).
  Rewrite of server-local addresses is enabled (--norewrite off).
  Carriage-return stripping is enabled (stripcr on).
  Carriage-return forcing is disabled (forcecr off).
  Interpretation of Content-Transfer-Encoding is enabled (pass8bits off).
  MIME decoding is disabled (mimedecode off).
  Idle after poll is disabled (idle off).
  Nonempty Status lines will be kept (dropstatus off)
  Delivered-To lines will be kept (dropdelivered off)
  Fetch message size limit is 100 (--fetchsizelimit 100).
  Do binary search of UIDs during 3 out of 4 polls (--fastuidl 4).
  Messages will be delivered with "/usr/bin/procmail".
  Single-drop mode: 1 local name recognized.
  No UIDs saved from this host.

I'm not new to fetchmail, but I haven't done any config in years.
Please advise
thanks
-- 
Tim 
tim at tee jay forty nine dot com or akwebsoft dot com
http://www.akwebsoft.com