Re: [Fetchmail-users] sslfingerprint: needs to match any of multiple listed fingerprints

[Matthias A. <mat...@gm...>]

Am 20.02.2017 um 20:49 schrieb grarpamp:
>
> I'm not familiar with use of 23 for that in sysexits(3) or intro(2),
> of course people often use locally defined codes as relavant to them.
23 was just an arbitrarily selected prime number without my knowing it
from any sysexits.h that I had seen.
>> Only their names suck. --sslcert vs. --sslcertfile? Uh. Not easily
>> changed unless you want to have duplicate names for the same option for
>> compatibility.
> I don't mind breaking backward compatibility in order to move
> forward with something better.

You don't, and breaking the many secondary crap literature that explains
in lengths how to extract the server's certificate and trust it when one
could instead just look at -v output to get the sslfingerprint might
have some value, but it's a radical step.