Re: [Fetchmail-users] Constantly changing ssl fingerprints

[Carlos E. R. <car...@op...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 2015-01-25 19:48, Martin Koeppe wrote:
> 
> Hi Jerry,

>>>>> user 'us...@gm...' there with password 'SECRET' options forcecr
>>>>> dropdelivered smtpname ssl sslcertpath /usr/local/etc/postfix/certs
>>>>> sslfingerprint '26:85:9C:DD:04:26:70:C2:20:0A:A0:A2:24:E4:CF:30'
> 
> why socomplicated? I use this snippet:
> 
> defaults:
>  	proto pop3 timeout 300 sslproto 'TLS1' ssl
>  	sslcertfile /usr/ssl/certs/ca-bundle.trust.crt
>  	sslcertck
>  	limit 50000000 warnings 86400

mine is simpler:

poll imap.gmail.com with interval 0 proto imap timeout 50, and tracepolls
        user G_NAME, with password PASSWORD, is LOCALUSER here, expunge 20, and ssl, and fetchall


I get this typical response:

<2.6> 2015-01-20 16:04:22 Telcontar fetchmail 2433 - -  6.3.26 querying imap.gmail.com (protocol IMAP) at 2015-01-20T16:04:22 CET: poll started
<2.6> 2015-01-20 16:04:23 Telcontar fetchmail 2433 - -  Trying to connect to 74.125.71.109/993...connected.
<2.6> 2015-01-20 16:04:23 Telcontar fetchmail 2433 - -  Server certificate:
<2.6> 2015-01-20 16:04:23 Telcontar fetchmail 2433 - -  Issuer Organization: Google Inc
<2.6> 2015-01-20 16:04:23 Telcontar fetchmail 2433 - -  Issuer CommonName: Google Internet Authority G2
<2.6> 2015-01-20 16:04:23 Telcontar fetchmail 2433 - -  Subject CommonName: imap.gmail.com
<2.6> 2015-01-20 16:04:23 Telcontar fetchmail 2433 - -  Subject Alternative Name: imap.gmail.com
<2.6> 2015-01-20 16:04:23 Telcontar fetchmail 2433 - -  imap.gmail.com key fingerprint: CC:06:25:2E:A6:3C:F5:61:DE:BF:25:E2:26:09:7F:0E
<2.6> 2015-01-20 16:04:23 Telcontar fetchmail 2433 - -  IMAP< * OK Gimap ready for requests from ...


I don't have to specify the certificate paths.

- -- 
Cheers / Saludos,

		Carlos E. R.
		(from openSUSE 13.1 x86_64 "Bottle" at Telcontar)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iEYEARECAAYFAlTGZOYACgkQtTMYHG2NR9U7zgCfcvBL1cYSZh7WeZmDUDJk9mg1
LmIAnArNzM3Hzt06fiMG7gzzSHqVdx9O
=JSen
-----END PGP SIGNATURE-----