Re: fetchmail ssl certificate verification problem in FreeBSD 8.1

2010-08-30 Thread Carl Johnson
Dan Strick mla_str...@att.net writes: I just installed FreeBSD release 8.1 and rebuilt the fetchmail port. Now I get messages like these when I run fetchmail: --- snip --- I can get rid of the message by removing the ssl option from the user line but then fetchmail would not even try to use

Re: fetchmail ssl certificate verification problem in FreeBSD 8.1

2010-08-16 Thread A. Wright
On Sun, 15 Aug 2010, RW wrote: On Sun, 15 Aug 2010 Dan Strick mla_str...@att.net wrote: That explains the problem. I copied the file /usr/local/share/certs/ca-root-nss.crt from my old FreeBSD release-8.0 system and hooked it up to fetchmail with the fetchmail sslcertfile option. At least

Re: fetchmail ssl certificate verification problem in FreeBSD 8.1

2010-08-16 Thread Dan Strick
On Mon, 16 Aug 2010 01:57, RW wrote: You'd be better off installing security/ca_root_nss otherwise you'll be stuck with a stale file. I don't know why you don't have it, it's a dependency of fetchmail and many other ports. I had it but I didn't know it. I did discover the file it

Re: fetchmail ssl certificate verification problem in FreeBSD 8.1

2010-08-15 Thread Erik Norgaard
On 15/08/10 21.38, Dan Strick wrote: I can get rid of the message by removing the ssl option from the user line but then fetchmail would not even try to use ssl. Why would the old fetchmail be better able to verify the server's ssl certificate? Has openssl changed? Where is the openssl

Re: fetchmail ssl certificate verification problem in FreeBSD 8.1

2010-08-15 Thread Dan Strick
On Sun, 15 Aug 2010 22:36, Erik Norgaard wrote: A little bit of searching around I found this (I don't know since when): # less /usr/src/crypto/openssl/certs/README.RootCerts The OpenSSL project does not (any longer) include root CA certificates. Please check out the FAQ: * How can I

Re: fetchmail ssl certificate verification problem in FreeBSD 8.1

2010-08-15 Thread RW
On Sun, 15 Aug 2010 15:35:02 -0700 (PDT) Dan Strick mla_str...@att.net wrote: That explains the problem. I copied the file /usr/local/share/certs/ca-root-nss.crt from my old FreeBSD release-8.0 system and hooked it up to fetchmail with the fetchmail sslcertfile option. At least fetchmail is