Re: [Fetchmail-users] tls bug and probably patch

[Matthias A. <mat...@gm...>]

Am 17.09.18 um 07:13 schrieb Kamil Jońca:
> Recently I got in fetchmail logs, something like this;
>
> --8<---------------cut here---------------start------------->8---
> Missing trust anchor certificate: /OU=No SNI provided; please fix your client./CN=invalid2.invalid
> --8<---------------cut here---------------end--------------->8---
> some googling, gives me:
> https://bugzilla.redhat.com/attachment.cgi?id=1472812&action=diff
>
> and applying this change in 7.0.0-alpha6+SSL+NLS. in socket.c 
> around line 1035 helped (i think)

What do I have to do to get imap.gmail.com to complain without SNI?


Anyways, as per my comments in that bugtracker entry and on the
fetchmail developer's mailing list, that patch is inadequate as it lacks
error checking/reporting.

Try the master branch from Git, this morning I have cherry-picked the
relevant patch from the legacy_64 branch, which has been in the latest
6.4 beta releases already.

Cheers,
Matthias