[fetchmail-users] Troubleshooting SSL error

[<dis...@ch...>]

Environment:
CentOS 5.7
Fetchmail RPM is fetchmail-6.3.6-1.1.el5_3.1
OpenSSL RPM is openssl-0.9.8e-20.el5
Sendmail RPM is sendmail-8.13.8-8.1.el5_7

When I test OpenSSL connectivity, I am able to connect to the IMAP  
server I want to poll and also to the local MTA.

openssl s_client -connect pod51011.outlook.com:993
openssl s_client -starttls smtp -connect localhost:25

Both of these commands open connections, I have attached a text file  
showing the complete output.

Fetchmail fails with an error that I do not understand. The error  
states there is an unknown protocol. The command and error output is  
immediately below, and farther down I have given output from fetchmail  
-V.

I would be grateful for any assistance that can be provided to resolve  
this issue.

Thank you
John


[otrs@tki-c01 ~]$  /usr/bin/fetchmail -vvv -a --ssl
fetchmail: 6.3.6 querying pod51011.outlook.com (protocol IMAP) at Wed  
04 Jan 2012 06:59:46 PM EST: poll started
fetchmail: running openssl s_client -connect  %h:%p (host  
pod51011.outlook.com service 993)
depth=3 /C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions,  
Inc./CN=GTE CyberTrust Global Root
verify return:1
depth=2 /CN=Microsoft Internet Authority
verify return:1
depth=1 /DC=com/DC=microsoft/DC=corp/DC=redmond/CN=Microsoft Secure  
Server Authority
verify return:1
depth=0 /C=US/ST=Washington/L=Redmond/O=Microsoft  
Corporation/OU=Exchange/CN=outlook.com
verify return:1
11337:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown  
protocol:s23_clnt.c:588:
fetchmail: SSL connection failed.
fetchmail: socket error while fetching from  
su...@js...@pod51011.outlook.com
fetchmail: 6.3.6 querying pod51011.outlook.com (protocol IMAP) at Wed  
04 Jan 2012 06:59:47 PM EST: poll completed
fetchmail: Query status=2 (SOCKET)
fetchmail: Deleting fetchids file.
fetchmail: normal termination, status 2
fetchmail: Deleting fetchids file.
DONE

###### AND #########

otrs@tki-c01 ~]$  /usr/bin/fetchmail -V -a --ssl
This is fetchmail release 6.3.6+GSS+RPA+NTLM+SDPS+SSL+HESIOD+NLS+KRB4+KRB5.

Copyright (C) 2002, 2003 Eric S. Raymond
Copyright (C) 2004 Matthias Andree, Eric S. Raymond, Rob F. Funk,  
Graham Wilson
Copyright (C) 2005-2006 Matthias Andree, Sunil Shetye
Fetchmail comes with ABSOLUTELY NO WARRANTY. This is free software, and you
are welcome to redistribute it under certain conditions. For details,
please see the file COPYING in the source or documentation directory.

Fallback MDA: (none)
Linux tki-c01.jsw4.net 2.6.18-274.12.1.el5xen #1 SMP Tue Nov 29  
14:18:21 EST 2011 x86_64 x86_64 x86_64 GNU/Linux
Taking options from command line and /opt/otrs/.fetchmailrc
Idfile is /opt/otrs/.fetchids
Fetchmail will show progress dots even in logfiles.
Fetchmail will forward misaddressed multidrop messages to otrs.
Options for retrieving from su...@js...@pod51011.outlook.com:
   True name of server is pod51011.outlook.com.
   Protocol is IMAP (using service 993).
   All available authentication methods will be tried.
   SSL encrypted sessions enabled.
   Server nonresponse timeout is 300 seconds (default).
   Default mailbox selected.
   All messages will be retrieved (--all on).
   Fetched messages will not be kept on the server (--keep off).
   Old messages will not be flushed before message retrieval (--flush off).
   Oversized messages will not be flushed before message retrieval  
(--limitflush off).
   Rewrite of server-local addresses is enabled (--norewrite off).
   Carriage-return stripping is disabled (stripcr off).
   Carriage-return forcing is disabled (forcecr off).
   Interpretation of Content-Transfer-Encoding is enabled (pass8bits off).
   MIME decoding is disabled (mimedecode off).
   Idle after poll is disabled (idle off).
   Nonempty Status lines will be kept (dropstatus off)
   Delivered-To lines will be kept (dropdelivered off)
   Fetch message size limit is 100 (--fetchsizelimit 100).
   Do binary search of UIDs during 3 out of 4 polls (--fastuidl 4).
   Messages will be SMTP-forwarded to: localhost (default)
   Single-drop mode: 1 local name recognized.
   Server connections will be made via plugin openssl s_client  
-connect  %h:%p (--plugin openssl s_client -connect  %h:%p).
   No UIDs saved from this host.