Re: [Fetchmail-devel] cannot fetch mail: Server CommonName mismatch

[Matthias A. <mat...@gm...>]

Am 13.09.18 um 10:39 schrieb Sergey Senozhatsky:
> Hello,
>
> As of today, fetchmail-6.3.26-6 cannot fetch from Gmail.
>
> fetchmail: Server certificate:
> fetchmail: Unknown Organization
> fetchmail: Issuer CommonName: invalid2.invalid
> fetchmail: Subject CommonName: invalid2.invalid
> fetchmail: Server CommonName mismatch: invalid2.invalid != imap.gmail.com
> fetchmail: imap.gmail.com key fingerprint: 90:4A:C8:D5:44:5A:D0:6A:8A:10:FF:CD:8B:11:BE:16
> fetchmail: Server certificate verification error: self signed certificate
> fetchmail: Missing trust anchor certificate: /OU=No SNI provided; please fix your client./CN=invalid2.invalid
>
> RedHat's bugzilla:
> https://bugzilla.redhat.com/show_bug.cgi?id=1611815
>
> This patch fixes the issue on my side:
> https://bugzilla.redhat.com/attachment.cgi?id=1472812&action=diff

The patch is inadequate, it lacks error checking, its use is
discouraged, and I have added a relevant comment.

My upstream Git repository for fetchmail has had a proper solution for a
year now,
https://gitlab.com/fetchmail/fetchmail/commit/9b8b634312f169fab872f3580c2febe5af031615