From: Joe Acquisto-j. <jo...@j4...> - 2015-05-09 01:01:44
|
>>> On 5/8/2015 at 8:06 PM, grarpamp <gra...@gm...> wrote: > MD5 Fingerprint=56:13:D6:65:39:C9:E3:06:50:4F:17:74:5C:4F:CF:9F > > The cert it not expired. Check the root bundle on your host > and that the path rolls up... ie make sure it includes the Rssl crt > http://rapidssl-aia.geotrust.com/rapidssl.crt . > Consider use of fingerprint it you want to pin down the cert. > > Read up on examples of examining certs and config of fetchmail with > openssl s_client > openssl x509 > openssl verify > fetchmail(1) --ssl related options and section > Secure Socket Layers (SSL) and Transport Layer Security (TLS) > > And you'll be good to go with maybe a minor update to > your config, which we cannot see to tell you. > f > Fetchmail won't downgrate to plaintext midstream if ssl was > specified but errors should be examined and fixed. > Hey! No fair peeking in headers! And after I went to all that trouble to "obfuscate" too. tsk. Sigh. Seriously, it's sorted, for now, anyway. joe a. |