[Fetchmail-users] Certs again

[Gene H. <ghe...@sh...>]

Greetings  Matthias Andree;
Gene,   

I agree, but I am not (currently) aware of a function that lets me query
this information from OpenSSL in an easy manner. I'll go look again to
see if I find it now, or if such information was added...

And that is why I was proposing ... to override it.

Five minutes later, a hail to Joel for stackexchange.com, I figured this:

https://stackoverflow.com/questions/4138139/how-to-find-out-the-path-for-openssl-trusted-certificate

https://stackoverflow.com/questions/37035300/how-to-determine-the-default-location-for-openssl-cnf/54282217

One is useful for me as a hint for having fetchmail print the
certificate paths used in verbose mode, and one is useful for you now to
check where your openSSL libraries go looking:

/usr/bin/openssl version -a | grep OPENSSLDIR | cut -f2 -d\"

/usr/local/bin/openssl version -a | grep OPENSSLDIR | cut -f2 -d\"

gene@coyote:~$ /usr/bin/openssl version -a | grep OPENSSLDIR | cut -f2 -d\"
/usr/local/ssl
gene@coyote:~$ /usr/local/bin/openssl version -a | grep OPENSSLDIR | cut -f2 -d\"
/usr/local/ssl

So both of those are pointing to the newly built and 
installed openssl-1.1.1i version in /usr/local.

Perhaps a missing make clean before the reconfigure, make,
sudo make install to put it in /usr?

IDK.

Thanks for more guidance.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page <http://geneslinuxbox.net:6309/gene>